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WIRELESS  LAN 
WlRRIES  MOUNT 


Rollouts  delayed ,  systems  shut  down  as 
organizations  scramble  for  security  fixes 


BY  BOB  BREWIN 

Concerns  about  security  have 
commercial  and  government 
enterprises  moving  quickly  to 
reassess  deployments  of  indus¬ 
try-standard  wireless  LANs. 
Experts  say  the  se¬ 
curity  flaws  are  a 
potentially  severe 
threat  to  networked 
systems  within  the 
nation’s  critical  in¬ 
frastructure. 

John  Montgom¬ 
ery,  chief  technical 
officer  at  Embarca- 
dero  Systems  Corp. 
in  Alameda,  Calif., 


said  he’s  working  to  improve 
the  security  of  802.11b  wireless 
LANs  that  the  company  has 
installed  at  nine  West  Coast 
ports.  Those  wireless  LAN 
infrastructures  support  con¬ 
tainer  inventory 
control  at  the 
ports.  They  also 
track  movement 
and  dispatch  oper¬ 
ations.  Cranes  and 
lifts  communicate 
data  read  from 
smart  tags  on  cargo 
boxes  to  a  central 
database. 

When  Embarca- 


SECURITY  WATCH 

Tipsonsecuringyour 
wireless  LAN;  what  help 
isontheway.PASES 

Wamingssoundedon 
vulnerability  of  airlines' 
Websites.  PA6E9 

Microsofttapsafederal 
cybercop  to  mold  its  secu; 
rtty  strategy.  PAGE  8 


PHILIPS  TAKES  BACK  NET  DATA  CENTER 


Bankruptcy  of  hosting 
firm  speeds  move 


BY  JAIKUMAR  VIJAYAN 

The  financial  collapse  of  Web 
hosting  firm  Exodus  Commu¬ 
nications  Inc.  prompted  a  key 
customer,  consumer  electron¬ 
ics  giant  Philips  Electronics 
NV,  to  accelerate  a  massive  re¬ 
location  of  its  Internet  data 
center  to  an  in-house  facility. 


The  relocation  project,  com¬ 
pleted  last  month,  is  the  first 
in  a  series  of  similar  moves 
that  Amsterdam-based  Philips 
plans  to  make  globally  in  an 
effort  to  gain  greater  control 
of  its  IT  equipment  and  net¬ 
works. 

Philips  will  continue  to  out¬ 
source  application  manage¬ 
ment  when  it  makes  sense  to 
do  so  but  will  keep  the  equip- 
Data  Center,  page  61 


dero,  a  division  of  Oakland, 
Calif.-based  Marine  Terminals 
Corp.,  installed  the  wireless 
LANs,  “the  issues  about  securi¬ 
ty  were  not  well  known  or  pub¬ 
licized,”  Montgomery  said.  But 
after  last  year’s  terrorist  at¬ 
tacks  on  the  U.S.  and  height¬ 
ened  concerns  over  security, 
he  “commissioned  a  security 
Wireless  LANs,  page  8 


FIRMS  HELD  TO 
PRIVACY  PLEDGES 


Push  for  enforcement 
could  spur  litigation 


BY  PATRICK  THIBODEAU 

WASHINGTON 

Federal  and  state  governments 
are  marching  companies  into 
courtrooms  for  breaking  their 
own  data  privacy  pledges.  And 
private  lawsuits  may  not  be  far 
behind. 

Enforcement  actions  “will 
perhaps  have  a  larger  impact 
than  legislation”  has  had  on 
companies  thus  far,  said  Zoe 
Strickland,  chief  privacy  offi¬ 
cer  at  the  U.S.  Postal  Service, 
during  a  privacy  conference 
here  last  week. 

Just  last  month,  for  example, 
the  Federal  Trade  Commission 
settled  its  first  security-related 
privacy  case  against  Eli  Lilly 
and  Co.  after  the  Indianapolis 
company  released  nearly  700 
customers’  e-mail  addresses 
collected  through  its  Prozac.- 
com  Web  site.  In  addition, 
Toys  R  Us  Inc.  in  Paramus,  N.J., 
paid  $50,000  to  settle  a  com¬ 
plaint  by  the  New  Jersey  attor- 
Privacy,  page  61 
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What  If... 

...you  could 
map  out  the  future? 

Complex  adaptive  systems  theory 

is  a  new  approach  to  business  planning  that  enables 
companies  to  predict  future  business  conditions 
by  crunching  current  information.  Find  out  how 
Procter  &  Gamble  is  using  these  systems  to 
improve  supply  chain  efficiency  and  how  Marsh 
and  McLennan  has  turned  to  them  to  anticipate 
the  costs  of  natural  disasters  before  they  occur. 
Story  begins  on  page  26. 


WE  BUILT  IT 


IT'S  TIME  TO  SET  THE  RECORD  STRAIGHT 

LONG  BEFORE  OUR  COMPETITORS  EVEN  ADDED  THE  WORD  "INFRASTRUCTURE" 
TO  THEIR  VOCABULARY,  WE  WERE  BUSY  CREATING  IT.  SINCE  WE  FIRST  LAUNCHED 
UNICENTER?  IT  HAS  BECOME  THE  DE  FACTO  GLOBAL  STANDARD  FOR  MANAGING 
ALL  eBUSINESS  INFRASTRUCTURE.  BUT  WE  DIDN'T  STOP  THERE -WE'RE  ALSO 
THE  WORLD  LEADER  IN  SECURITY  AND  STORAGE  SOFTWARE.  EVERY  DAY,  OUR 
SOFTWARE  HANDLES  OVER  180  MILLION  TRANSACTIONS,  PROTECTS  $50  BILLION 
IN  WIRE  TRANSFERS  AND  STORES  40  MILLION  SECURITY  EXCHANGES.  EXPERTISE 

DOESN'T  HAPPEN  OVERNIGHT.  IT'S  TAKEN  25  YEARS  OF  HARD  WORK  AND 

LEADERSHIP  TO  GET  TO  BE  THE  BEST.  SO  WHEN  WE  SAY  YOU  CAN  TRUST  EVERY 
ONE  OF  OUR  18,000  EMPLOYEES  AROUND  THE  WORLD  TO  DELIVER  THE  SOFTWARE 
AND  SERVICE  THAT  YOUR  eBUSINESS'  SUCCESS  DEPENDS  ON,  WE  REALLY  MEAN  IT. 
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A  box  that  delivers  paper  documents  anywhere  overnight? 
Or  a  box  that  delivers  them  instantly  over  the  internet? 


The  Canon  imageRUNNER  with  document  distribution  technology. 

You  can  send  paper  documents  anywhere,  in  any  form,  at  anytime,  right  over  your  network  or  the  internet. 
Instantaneously.  Simply  scan  a  document  into  the  imageRUNNER  5000,  and  you  can  send  it  to  any  desktop, 
e-mail  address,  fax  machine,  database  or  file  server.  And  since  the  Canon  imageRUNNER  is  capable  of 
integrating  directly  with  your  existing  e-mail,  lanfax,  and  document  management  software,  you  can 
maximize  your  investment  in  these  systems*.  The  cost  and  hassle  of  overnight  delivery  are  finally  over. 
At  Canon,  we’re  giving  people  the  know-how  to  make  paper  documents  work  in  an  internet  world. 
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Call  1  866-25-CANON  or  visit  www.imagerunner.com 


Cation  KNOW  HOW 


HEADQUARTERS, 
»  ROME 


Historically,  IT  consultants 
have  been  in  big  demand 
whenever  there’s  been  an 
economic  downturn.  Not 
this  time.  Instead,  inde¬ 
pendent  consultants  are 
I  struggling  to  find  work 
I  and  figure  out  other  ways 
'  to  be  productive.  PAGE  30 


Server-based  applications  feeding 
thin-client  systems  can  reduce 
equipment  maintenance  and  upgrade 
costs.  IT  departments  are  finding  that 
these  applications  provide  fewer  end- 
user  problems  and  offer  better  control 
over  applications  and  data.  PAGE  40 
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OPINIONS  22 


6  Citibank  replaces  its  aging 
back-office  banking  systems  in  a 
$100  million  global  project. 

7  Kodak  says  it’s  making  big  cuts 
in  PC  total  cost  of  ownership  by 
standardizing  on  IBM  equipment. 

9  El  Al  heeds  the  warning  that  air¬ 
lines’  Web  sites  are  a  potential  hole 
into  their  back-end  systems. 


12  Notes  and  Domino  users  at 

Lotusphere  get  some  Java  dumped 
in  their  laps  —  and  like  it. 

14  Incompatible  systems  force 

many  IT  shops  to  shift  resources 
from  application  development  to 
application  integration. 


16  Retail  CIOs  face  some  of  the 


same  problems  that  contributed  to 
Kmart’s  slide. 


For  breaking  news, 
updated  twice  daily,  visit 
Computerworld.com: 


www.computerworid.com/q?q4000 


25  Paul  A.  Strassmann  contends 

that  megaoutsourcing  deals  are  a 
sign  that  companies  are  in  finan¬ 
cial  distress.  His  research  reveals 
that  companies  in  eight  recent  out¬ 
sourcing  deals  have  delivered 
declining  returns  on  shareholder 
equity  from  1996  to  2000. 

28  Grid  computing,  a  fairly  recent 
approach  to  distributed  computing 
that  draws  upon  underutilized 
CPU  and  storage  capacity,  could 
usher  in  a  new  era  of  supercom¬ 
puter-type  business  applications. 

34  Web  site  investments  are 

being  tracked  more  closely  to 
determine  whether  and  to  what 
extent  they  are  contributing  to  the 
bottom  line. 

36  Fran  Quittel  offers  advice  to  a 
Cisco  Certified  Network  Associate 
who  has  no  work  experience,  a 
Web  designer  who’s  checking  out 
the  Chicago  market  and  a  Unix  de¬ 
veloper  who’s  considering  switch¬ 
ing  over  to  Mac  OS  X. 


39  Nicholas  Petreley  knows  why 

AOL  Time  Warner  should  be  inter¬ 
ested  in  Red  Hat:  It  could  use  Red 
Hat’s  open-source  technology  as 
the  basis  for  an  inexpensive  all¬ 
purpose  home  console. 

42  Agile  programming  systems 
emphasize  frequent  iterations  and 
interaction  with  users. 

46  QuickStudy:  PHP  is  an  open- 
source  language  designed  for  cre¬ 
ating  Web  applications.  Learn 
more  in  this  week’s  tutorial. 

48  Security  Journal:  Vince  Tues¬ 
day  uses  a  quiet  time  to  make  long- 
range  plans,  though  he  knows  he 
can’t  plan  for  problems  ranging 
from  router  vulnerabilities  to 
viruses  traveling  in  on  Secure 
Sockets  Layer  sessions. 

50  Emerging  Companies:  Atomi- 

ca  says  its  search  portal  software  is 
easy  to  use  and  its  innovative  tech¬ 
nology  provides  the  most  relevant 
results  first. 


22  Patricia  Keefe  says  that  Bill 
Gates’  call  to  improve  security  in 
Microsoft’s  products  is  overdue. 
But  the  changes  will  primarily  ben¬ 
efit  future  products,  leaving  users 
of  the  company’s  existing  security- 
weak  products  at  risk. 

22  Pimm  Fox  writes  that  in  the 
rush  to  Web  services,  users  must 
realize  that  there’s  no  broad  agree¬ 
ment  regarding  XML  protocols  and 
standards. 

23  Thornton  May  contends  that 
vendor  CEOs  have  shown  little  of 
something  that’s  really  needed  in 
difficult  times:  leadership. 

62  Frank  Hayes  says  that  Sam 
Palmisano’s  chief  mission  as  Lou 
Gerstner’s  successor  at  IBM  will 
be  very  simple:  Listen  to  the 
customer. 
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CHANGE  AT  THE  TOP 

What  should  Samuel  Palmisano’s 
top  priorities  be  at  IBM?  How 
would  you  rate  Louis  Gerstner’s 
tenure?  Post  your  opinion  in  our 
online  forum. 

www.computerworld.com/q7a1550 


.NET  TO  DOMINATE? 

With  its  .Net  framework,  Micro¬ 
soft  has  quietly  pulled  ahead  of  the 
developer  curve  and  is  positioned 
to  dominate  Web  services  with  its 
new  application  programming  in¬ 
terfaces,  says  community  guest 
columnist  Dan  Rezick. 
www.computerworld.com/ 
community/os 


IN  LIKE  THIN 

Read  interviews  with  key  industry 
technologists  highlighting  ongoing 
thin-client  activities  for  Windows 
and  Unix.  Also:  A  Tarantella  in¬ 
stallation  and  comparison  chart  of 
three  leading  Windows  thin-client 
systems,  plus  X  for  Unix. 
www.computerworld.com/q7a1540 


INSIDE  PHP 

PHP  inventor 
Rasmus  Lerdorf 
(left)  talks  about 
what  corporate  IT 
managers  should 
know  about  the 
open-source  scripting  language. 
www.computetworld.com/q724785 
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Feds  Mull  Airline 
Security  Network 


Federal  transportation  officials  are 
evaluating  the  idea  of  building  a 
network  that  would  link  all  airline 
reservation  systems  to  private  and 
government  databases  for  use  in 
screening  passengers.  Two  groups 
of  IT  vendors  are  developing  proto¬ 
types,  but  participants  said  a  deci¬ 
sion  hasn’t  been  made  on  whether 
to  move  ahead  with  tests  or  the 
deployment  of  such  a  network. 

Antitrust  Judge  Sedts 
Settlement  Update 

The  federal  judge  overseeing  the 
antitrust  case  against  Microsoft 
Corp.  ordered  the  software  vendor 
and  the  Department  of  Justice  to 
file  a  joint  status  report  and  to  meet 
with  her  Feb.  8  to  discuss  any  last- 
minute  efforts  to  modify  their  pro¬ 
posed  settlement  deal.  Judge 
Colleen  Kollar-Kotelly  also  asked 
the  two  sides  to  set  a  timetable  for 
proposing  changes  to  the  deal. 


Linux  Group  Offers 
Compatibility  Tools 

At  the  LinuxWorld  conference  in 
New  York,  the  Oakland,  Calif.-based 
Free  Standards  Group  released  a 
set  of  application  programming  in¬ 
terfaces  and  other  tools  aimed  at 
boosting  compatibility  between  dif¬ 
ferent  versions  of  Linux.  The  group 
also  announced  an  internationaliza¬ 
tion  guide  designed  to  help  develop¬ 
ers  localize  Linux  technology. 

Adobe  Sips  Deal  to 
Buy  Forms  Developer 

San  Jose-based  Adobe  Systems 
Inc.  agreed  to  acquire  Accelio  Corp., 
a  developer  of  electronic  forms  soft¬ 
ware,  in  a  stock-swap  deal  that’s 
currently  valued  at  S72  million. 
Adobe  surpassed  an  unsolicited  bid 
that  was  submitted  to  Ottawa-based 
Accelio  last  month  by  Waterloo, 
Ontario-based  Open  Text  Corp. 
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Citibank  Overhauls 
Overseas  Systems 

Analysts:  Replacing  systems,  creating 
cross-border  standards  may  exceed  $10 OM 


BY  LUCAS  MEARIAN 

N  WHAT  analysts  are  es¬ 
timating  to  be  a  $100  mil- 
lion-plus  project,  Citi¬ 
bank  is  replacing  a 
decades-old  set  of  back- 
office  corporate  banking  sys¬ 
tems  in  all  of  its  overseas  cor¬ 
porate  offices  with  a  single 
platform,  which  will  allow  it  to 
create  a  cross-border  set  of 
standard  user  interfaces  and 
business  processes. 

The  New  York-based  bank 
has  already  completed  change¬ 
over  projects  in  the  Asia-Pacific 
region,  Western  and  Eastern 
Europe  and  Latin  America, 
using  a  software  suite  it  pur¬ 
chased  from  an  India-based 
technology  vendor  spun  off  by 
the  bank  three  years  ago. 

The  changeover,  which  be¬ 
gan  in  early  2000,  is  expected 
to  continue  through  2004. 
There  are  still  rollouts  to  be 
completed  in  more  than  100 
countries.  Citibank  formally 
disclosed  its  work  on  the  proj¬ 
ect  late  last  month. 

The  bank  said  the  project  will 
pay  for  itself  by  letting  the  com¬ 
pany  avoid  development  costs 
related  to  a  clunky  legacy  back- 
office  system.  Developed  in- 


house  in  the  1970s,  the  old  sys¬ 
tem  has  morphed  into  58  dis¬ 
parate  software  applications, 
said  Jeff  Berg,  executive  direc¬ 
tor  of  program  management  at 
Citibank’s  parent,  New  York- 
based  Citigroup  Inc. 

“In  the  70s,  we  were  grow¬ 
ing  rapidly  in  countries  around 
the  world.  To  get  up  and  run¬ 
ning  quickly,  we’d  use  this  sys¬ 
tem  called  Cosmos  [Consoli¬ 
dated  Online  Modulated  Oper¬ 
ating  System],”  Berg  said.  “As 
the  bank  grew,  we  did  make  a 
mistake  in  that  we  released  the 
source  code  to  each  of  the 
countries,  and  they  changed  it.” 

Berg  said  Citibank  now  has 
a  single  system  that’s  cus¬ 
tomized  for  each  country  it  op¬ 
erates  in,  using  each  nation’s 
language,  regulatory  rules  and 
business  processes. 

Although  it’s  not  unique,  the 
back-office  system  replacement 
is  the  largest  of  its  kind,  ana¬ 
lysts  said. 

According  to  Avivah  Litan, 
an  analyst  at  Gartner  Inc.  in 
Stamford,  Conn.,  mapping  his¬ 
torical  data  is  usually  the 
biggest  challenge  in  a  systems 
changeover  for  an  organization 
of  Citibank’s  size.  “Also,  it’s  all 


Citistandards 

What  Citibank  had: 

■  A  back-office  corporate  banking 
platform  built  in  the  1970s  and  used 
in  more  than  100  countries;  because 
source  code  was  released,  the  bank 
wound  up  with  58  disparate  plat¬ 
forms. 

■  Each  platform  conformed  to  local 
business  rules  but  didn’t  share  infor¬ 
mation  efficiently  across  borders. 
Citibank  would  have  to  recode  the 
software  on  each  of  the  58  platforms 
to  update  them  for  a  standard  format. 

What  Citibank  will  have: 

■  A  single  platform  based  on  soft¬ 
ware  from  a  former  offshore  devel¬ 
opment  arm  of  Citibank 

■  Four  data  centers  in  Europe,  con¬ 
solidated  from  18. 

■  Language  and  regulatory  require¬ 
ments  that  can  be  adapted  through 
use  of  parameters  in  the  software 

■  A  new  set  of  standardized,  cross- 
border  business  procedures 


the  logic  on  the  accounts,” 
Litan  said.  “They  have  all  these 
business  rules  . . .  embedded  in 
old  Cobol  code.  [In]  the  old 
systems,  the  data  and  intelli¬ 
gence  [are]  all  in  the  same  pro¬ 
grams.  They’re  not  separated 
out  into  different  ones  like 
modern  applications.” 

Both  Litan  and  Octavio 
Marenzi,  managing  director  at 


Boston-based  Celent  Commu¬ 
nications  LLC,  said  the  project 
will  cost  more  than  $100  mil¬ 
lion  and  could  even  run  in  ex¬ 
cess  of  a  half-billion  dollars. 
The  ultimate  cost  of  the  proj¬ 
ect  will  depend  on  how  many 
consulting  firms  Citibank  uses 
to  help  analyze  the  existing 
systems  and  migrate  data  over 
to  the  new  platform,  said  Litan. 

Berg  said  Citibank  plans  to 
reduce  the  number  of  its  data 
centers  in  Europe  from  18  to 
about  four  by  standardizing  on 
the  new  banking  platform  from 
i-Flex  Solutions  Inc.  in  Banga¬ 
lore,  India.  The  bank  antici¬ 
pates  an  18-month  return  on 
investment,  said  Berg. 

The  software,  called  Flex- 
cube,  is  based  on  an  Oracle 
database.  It  automates  the  gen¬ 
eral  ledger  as  well  as  customer 
accounting,  deposits  and  with¬ 
drawals,  and  interest  on  ac¬ 
counts,  among  other  services. 
Instead  of  addressing  multiple 
platforms,  Citibank  will  be 
able  to  simply  change  parame¬ 
ters  in  the  new  software  to 
incorporate  a  particular  coun¬ 
try’s  language,  regulations  and 
currency  conversions. 

“The  conversions  are  quite 
exciting.  Those  are  weekend 
kinds  of  efforts  that  usually  oc¬ 
cur  around  month’s  end,”  said 
Berg.  “What  we’re  finding  is 
anytime  you  install  a  system 
like  this,  you  have  opportuni¬ 
ties  to  reconsider  your  busi¬ 
ness  processes.  Because  we’re 
making  the  shift  from  a  coun¬ 
try  to  regional  back-office  sys¬ 
tem,  it  definitely  gives  us  op¬ 
portunity  to  create  . . .  stan¬ 
dardization.”  I 


Citibank:  Culture  Clashes,  Cross-Border  Rivalries  Inevitable  in  a  Global  Project 


IT  issues  aren't  the  only  problems  that  can  sur¬ 
face  with  a  project  the  size  of  Citibank’s  switch  of 
back-office  business  systems. 

“There’s  a  lot  of  internal  rivalries  and  politics 
that  goes  on  as  well.  So  it’s  a  very  difficult  propo¬ 
sition  to  do,”  said  Octavio  Marenzi,  managing  di¬ 
rector  at  Celent  Communications. 

Jeff  Berg,  executive  director  of  program  man¬ 
agement  at  Citibank's  parent,  Citigroup,  agreed 
that  the  changeover  has  created  some  intra¬ 
country  rivalries.  “I  think  the  challenge  has  been 
working  across  the  business  processes.  Opera¬ 
tions  people  defend  the  way  they  do  things.  We 
keep  saying,  ‘Yes,  we  know  these  countries  are 
different,  but  they’re  more  similar  than  different,’  ’’ 


he  said.  “In  terms  of  adopting  the  Citibank  cul¬ 
ture,  these  banks  aren't  as  different  as  we  think. 

“We’re  also  dealing  with  every  time  zone. . . . 
We  kind  of  settled  on  early-in-the-morning  meet¬ 
ings,"  he  added. 

Gartner  analyst  Avivah  Litan  said  there  are  typ¬ 
ically  tensions  related  to  getting  systems  up  on  a 
strict  schedule.  “They'll  go  through  months  and 
months  of  parallel  testing,  and  finally,  when  they 
do  cutovers  -  and  that  will  be  done  in  stages  - 
these  people  will  be  up  all  night,”  Litan  said. 

About  250  Citibank  IT  professionals  worldwide 
are  involved  in  the  project,  according  to  Berg. 

One  way  to  alleviate  such  pressures  is  to  set 
up  an  extensive  testing  environment  to  ensure 


that  when  the  platform  does  go  live,  problems  will 
be  held  to  a  minimum. 

Citibank  has  instituted  an  elaborate  testing 
program  that’s  managed  country  by  country.  “The 
testing  involved  is  the  end-to-end  tests  to  make 
sure  not  only  [that  the  software  platform]  Flex- 
cube  operates  correctly,  but  the  systems  it  talks 
to  are  also  operating  correctly,"  Berg  said. 

Berg  said  Citibank  opted  to  begin  the  change¬ 
over  overseas,  but  he  noted  that  U.S.  systems 
also  run  on  old,  in-house  back-office  platforms. 
“We’re  a  global  company.  We  just  elected  to  start 
[overseas],"  he  said.  “I  think  down  the  road,  we’ll 
probably  tackle  it  [in  the  U.S.]. 

-  Lucas  Mearian 
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Kodak  Touts  TCO  Success  Amid  Global  PC,  Laptop  Rollout 

Standardized  systems ,  help  desk  tools 

help  cut  hardware  and  operating  costs 


BY  MATT  HAMBLEN 

Total  cost  of  ownership  (TCO) 
for  PCs  has  dropped  substan¬ 
tially  at  Eastman  Kodak  Co. 
midway  through  a  three-year 
global  deployment  of  40,000 
IBM  laptops  and  desktops. 

There  are  several  reasons 
for  the  reduced  costs,  a  Kodak 
IT  manager  said  last  week,  in¬ 
cluding  buying  direct  from 
IBM  and  standardizing  its 
hardware  and  a  set  of  prein¬ 
stalled  software. 

That  standardization  is  re¬ 
placing  an  older,  more  costly 
process  that  required  Kodak’s 
IT  workers  to  install  software 
on  a  variety  of  PCs,  said  Tony 
DiBitetto,  director  of  global 
desktop  and  telecommunica¬ 
tions  services  at  the  Rochester, 
N.Y.-based  company. 

DiBitetto  declined  to  dis¬ 
close  exactly  how  much  mon¬ 
ey  Kodak  has  saved  through 
the  IBM  deal.  But  he  said  going 
with  IBM  exclusively  saves  Ko¬ 
dak  20%  to  25%  on  laptop  and 
desktop  hardware,  which  is 
still  being  purchased  and 
rolled  out  as  part  of  a  project 
that’s  due  to  end  next  year. 

Analysts  said  large  compa¬ 
nies  can  reduce  their  annual 
cost  of  ownership  by  hundreds 
of  dollars  per  machine,  or  by  as 
much  as  25%  during  a  machine’s 
lifetime,  through  a  rigorous 
TCO  management  program. 

“TCO  is  hard  to  measure,  but 
there  are  savings  possible,” 
said  Roger  Kay,  an  analyst  at 
IDC  in  Framingham,  Mass.  “If 
the  number  of  client  machines 
gets  big  —  in  the  thousands  — 
then  it  is  valuable  for  enter¬ 
prises  to  look  at  TCO.” 

Looking  Beyond  Price  Tags 

But  teaching  corporations  to 
look  beyond  the  initial  pur¬ 
chase  price  and  consider  other 
TCO  factors  is  arduous,  said 
Mark  Margevicius,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.  “Reducing  TCO  is  like 
getting  religion,”  he  said. 

DiBitetto  said  help  desk 


staffers  at  Kodak  are  now  able 
to  resolve  nearly  twice  as  many 
queries  by  phone,  addressing 
68%  of  the  inquiries,  up  from 
about  35%  in  2000.  Because  it 
can  cost  as  much  as  $150  for  a 
help  desk  technician  to  look  at 
a  machine  on-site,  the  savings 
add  up.  “If  you  make  thousands 
of  visits  a  year,  that’s  a  big 
number,”  DiBitetto  said. 

The  technology  helping  Ko¬ 
dak  limit  help  desk  inquiries  is 
IBM’s  Rapid  Restore,  a  soft¬ 
ware  utility  that  sits  on  a  hid¬ 
den  partition  and  can  be 
tapped  with  a  help  desk  call, 
DiBitetto  said.  Restores  occur 
within  20  to  30  minutes. 

Kodak  also  saves  costs  with 


IT  depreciation 
change,  security 
spending  are  key 


BY  PATRICK  THIBODEAU 

WASHINGTON 

In  his  approximately  3,900- 
word  State  of  the  Union  ad¬ 
dress  last  week,  President 
Bush  said  the  word  technology 
just  three  times.  Even  so,  he 
outlined  a  message  that  will 
have  a  direct  impact  on  high- 
tech  vendors  and  users. 

High-tech  companies  could 
benefit  from  a  rise  in  federal 
spending  on  security.  In  partic¬ 
ular,  Bush  called  for  increased 
use  of  technology  to  track  ar¬ 
rivals  and  departures  at  U.S. 
borders.  The  federal  govern¬ 
ment  spent  $3  billion  last  year 
on  IT-related  security,  and  ana¬ 
lysts  said  the  president’s  pro¬ 
posed  budget,  due  to  be  re¬ 
leased  today,  may  increase  that 
amount  by  $1  billion. 

“The  federal  government  is 
our  industry’s  No.  1  customer 
worldwide,”  said  Robert  Cre- 
santi,  vice  president  of  public 


standard  “software  images” 
that  can  be  burned  onto  PC 
hard  drives  at  the  IBM  factory, 
with  delivery  within  10  days. 
The  software  image  includes 
the  Windows  2000  operating 
system,  applications,  language 
utilities,  hardware  specifica¬ 
tions  and  drivers. 

In  October,  IBM  announced 
management  software  called 
ImageUltra  that  enables  it  to 
put  a  superimage  of  software 
on  a  PC’s  hard  drive  that  will 
custom-configure  itself  to  the 
machine’s  hardware  specifica¬ 
tions.  That  way,  laptop  and 
desktop  machines  can  be 
quickly  imprinted  with  an  im¬ 
age  or  updated,  said  Kay. 

DiBitetto  said  IBM  was  cho¬ 
sen  in  2000  because  Kodak’s 
efforts  to  cut  costs  meshed  well 
with  IBM’s  image-management 
approach. 


policy  at  the  Business  Software 
Alliance,  a  Washington-based 
trade  group.  “It’s  pretty  clear 
that  when  the  federal  govern¬ 
ment  spends  more,  the  indus¬ 
try  does  better.” 

But  IT  users  also  stand  to 
gain  if  Bush’s  support  for  an 
economic  stimulus  package  res¬ 
onates  with  Congress. 

As  part  of  the  stimulus  legis- 


What  Bush  Wants 

STIMULUS  PACKAGE  WITH 
DEPRECIATION  BONUS.  Write¬ 
offs  spread  over  five  years 
would  get  a  30%  bonus  in 
the  first  two  years. 

SECURITY  SPENDING.  A  big 

increase  is  expected  to  be 
included  in  Bush’s  proposed 
budget. 

BROADBAND.  Despite  a  push 
by  high-tech  executives  to 
make  a  national  broadband 
network  a  priority,  Bush  was 
silent  on  the  issue.  Insiders 
say  the  White  House  hasn’t 
worked  out  a  plan  but  wants 
to  support  the  idea. 


Margevicius,  Kay  and  Bob 
Sutherland,  an  analyst  at  Tech¬ 
nology  Business  Research  Inc. 
in  Hampton,  N.H.,  all  said  that 
IBM  has  been  a  leader  in  image 
management  tools.  Although 
the  tools  could  help  IBM  re¬ 
gain  the  PC  market  share  it  lost 
last  year,  the  company  has  had 
difficulty  explaining  its  vari¬ 
ous  products  and  their  value, 
they  said. 


lation,  the  U.S.  Senate  last  week 
approved  a  compromise  two- 
year,  30%  depreciation  bonus 
that  lets  businesses  immedi¬ 
ately  write  off  a  much  larger 
share  of  equipment  and  soft¬ 
ware  purchases  than  they  pre¬ 
viously  could. 

IT  managers  said  the  depre¬ 
ciation  bonus  may  prompt 
them  to  speed  up  purchases. 

“I  don’t  know  if  we  would 
dream  up  new  investments, 
[but]  we  would  certainly  move 
up”  some  purchases,  said  Ergin 
Uskup,  CIO  at  United  Station¬ 
ers  Inc.,  a  $4  billion  business 
products  distributor  in  Des 
Plaines,  Ill. 

Allen  Syopys,  CIO  at  PAR 
Pharmaceutical  Inc.  in  Spring 
Valley,  N.Y.,  said,  “If  you  have 
plans  for  upgrading  your  envi¬ 
ronment  anyway,  you  would 
accelerate  that.” 

The  depreciation  bonus  will 
help  the  high-tech  sector,  but 
it  won’t  necessarily  trigger  an 
economic  turnaround,  said  an¬ 
alysts.  “Maybe  it  will  hasten 
the  end  of  what’s  been  a  capi¬ 
tal-spending  recession,”  said 
French  Caldwell,  an  analyst  at 


TCO  is  expected  to  become 
a  bigger  selling  point  with  PC 
vendors,  as  corporations  seek 
ways  to  reduce  costs  in  the 
current  down  economy,  the  an¬ 
alysts  said. 

“Saving  $200  on  the  [pur¬ 
chase]  price  of  an  individual 
PC  is  important,”  DiBitetto 
said.  “But  it’s  nothing  like  the 
savings  we  get  from  resolving  a 
significant  percentage  of  sup¬ 
port  issues  at  the  service  desk 
without  having  to  send  a  tech¬ 
nician  on-site.”  ► 


Gartner  Inc.  in  Stamford,  Conn. 
But  many  companies  bought 
more  IT  equipment  than  they 
could  “digest  very  quickly,”  he 
said.  “They  are  still  in  the  di¬ 
gestion  phase.” 

However,  IT  vendors  are 
counting  on  the  accelerated 
depreciation. 

The  bonus  “is  clearly  the 
most  important  issue  for  the 
tech  community  right  now,” 
said  Ralph  Heilman,  senior 
vice  president  of  government 
affairs  at  the  Information 
Technology  Industry  Council 
in  Washington.  “There  are  no 
silver  bullets  to  get  the  tech 
community  revived,  but  this . . . 
can  be  very  helpful.” 

The  U.S.  House  of  Represen¬ 
tatives  last  year  approved  a 
three-year,  30%  depreciation 
bonus.  But  a  similar  bill  in  the 
Senate  sponsored  by  Gordon 
Smith  (R-Ore.)  failed  last 
week.  Smith,  in  an  amendment 
co-sponsored  with  Max  Baucus 
(D-Mont.),  then  won  approval 
for  the  two-year  bonus. 

Under  the  plan,  if  a  comput¬ 
er  costs  $1,000,  the  purchaser 
would  be  able  to  write  off  a 
bonus  30%  of  the  cost  in  the 
first  year,  plus  20%  (the  normal 
depreciation  spread  over  five 
years)  of  the  remaining  $700. 1 


Cost-Conscious 

Total  cost  of  ownership  of  deshtop  and  laptop  PCs  for  businesses 


DEVICE 

LIFETIME  IN 
ENTERPRISE 

ANNUAL  COST* 

Desktop 

Four  years 

34,500-38,000 

Laptop 

Three  years 

S7, 500-311,000 

*  Annual  cost  includes  capital  cost,  cost  of  administration  for  the  purchase,  technical  support  and  user 
costs,  such  as  reduced  productivity  from  problems  related  to  a  computer. 


President's  Plans  Could  Help  Users,  Vendors 
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Wireless  LANs 

audit,  which  detected  numer¬ 
ous  holes.” 

To  address  the  problems, 
Embarcadero  hired  a  staff  ded¬ 
icated  to  cybersecurity,  in¬ 
stalled  firewalls  on  its  routers 
and  is  working  with  third-par¬ 
ty  software  vendors  to  provide 
additional  encryption  soft¬ 
ware. 

TXU  Electric  &  Gas  in  Dal¬ 
las,  meanwhile,  has  an  ongoing 
wireless  LAN  pilot  project  at 
its  Comanche  Peak  nuclear 
power  plant  in  Glen  Rose, 
Texas.  But  the  company  does¬ 
n’t  plan  wide-scale  deploy¬ 
ment  until  it  completes  a  secu¬ 
rity  study,  said  spokesman 
Rand  LaVonn. 

“We  are  well  aware  of  the  se¬ 
curity  vulnerabilities  of  wire¬ 
less  LANs,”  LaVonn  said.  “We 
do  everything  we  can  do  to 
make  Comanche  Peak  depend¬ 
able  and  safe.” 

The  U.S.  Department  of  En¬ 
ergy’s  Lawrence  Livermore 
National  Laboratory  in  Liver¬ 
more,  Calif.,  last  month  put  a 
temporary  ban  on  wireless 
LANs,  which  had  been  in¬ 
stalled  in  nonclassified  areas. 
Ted  Michels,  the  lab’s  acting 
CIO  and  principal  deputy  di¬ 
rector  for  computation,  said  in 
the  Jan.  18  issue  of  the  lab’s 
newsletter  that  “wireless  net¬ 
works  and  their  built-in  securi¬ 
ty  features  have  been  found 
under  testing  to  be  very  inse¬ 
cure.  For  this  reason,  the  lab 
has  decided  to  control  the  de¬ 
ployment  of  wireless  technolo¬ 
gies  until  solutions  can  be 
found  to  address  their  security 
vulnerabilities.” 


We  are  well 
aware  of  the 
security  vulner¬ 
abilities  of 
wireless  LANs. 
We  do  every¬ 
thing  we  can 
do  to  make 
Comanche 
Peak  depend¬ 
able  ana  safe. 

RAND  LAVONN, SPOKESMAN, 
TXU  ELECTRIC  &  GAS 

Lawrence  Livermore  spokes¬ 
man  David  Schwoegler  said 
the  lab  would  keep  its  wireless 
LANs  shut  down  “as  long  as  it 
takes  to  get  it  right.”  He  added 


that  because  of  these  security 
concerns,  the  DOE  has  a  long¬ 
standing  policy  against  the  use 
of  wireless  LANs  in  classified 
areas. 

Federal  agencies  in  general 
have  started  to  clamp  down  on 
wireless  LAN  deployment,  ac¬ 
cording  to  Alex  Froede,  man¬ 
ager  of  wireless  security  initia¬ 
tives  in  the  U.S.  government 
division  of  Plano,  Texas-based 
Electronic  Data  Systems  Corp. 
“A  number  of  agencies”  have 
curtailed  deployment  until  se¬ 
curity  can  be  built  in  upfront, 
he  said. 

Hard  to  Detect 

David  Dziadziola,  CEO  of 
San  Francisco-based  security 
consulting  firm  Wholepoint 
Corp.,  said  he’s  aware  of  wire¬ 
less  security  audits  that  have 
successfully  penetrated  mili¬ 
tary  facilities  from  up  to  20 
miles  away.  Some  of  those  cas¬ 
es  involved  military  labs  that 
had  other  LANs  attached  to  the 
wireless  networks.  “To  detect 
these  penetrations  is  next  to 
impossible,”  said  Dziadziola. 

Brian  Ruf,  an  information  as¬ 


surance  scientist  at  CACI  In¬ 
ternational  Inc.,  in  Arlington, 
Va.,  said  that  in  his  view,  run¬ 
ning  an  insecure  wireless  LAN 
is  “essentially  the  same  as  run¬ 
ning  a  wire  from  your  network 
out  to  the  street  and  leaving 
the  jack  loose  for  anyone  to 
plug  in.” 

Ruf  added  that  large  enter¬ 
prises  face  another  problem 
before  they  even  try  to  deploy 
strong  security:  finding  the 
wireless  LANs.  Wireless  LAN 
installations  have  “run  ram¬ 
pant  in  large  organizations,” 
Ruf  said,  with  users  buying  the 
relatively  cheap  gear  and 
hooking  it  up  to  networks 
without  the  knowledge  of  the 
CIO  or  IT  department. 

David  Halasz,  manager  of 
software  development  in  the 
wireless  networking  business 
unit  at  Cisco  Systems  Inc.  and 
chairman  of  IEEE  802  Task 
Group  I,  which  is  working  on 
wireless  LAN  security  en¬ 
hancements,  said  enterprises 
already  have  more  robust  secu¬ 
rity  tools  to  choose  from  than 
weak,  built-in  Wi-Fi  encryp¬ 
tion.  And  they  will  have  even 
better  tools  later  this  year 
when  vendors  start  adding  the 
hard-to-crack  Advanced  En¬ 
cryption  Standard  to  their  de¬ 
fensive  arsenal. 

Dennis  Eaton,  chairman  of 
the  Wireless  Ethernet  Compat¬ 
ibility  Alliance,  said  he  be¬ 
lieves  that  although  it’s  pru¬ 
dent  for  organizations  such  as 
Lawrence  Livermore  to  de¬ 
mand  tight  security,  other  en¬ 
terprises  can  comfortably  op¬ 
erate  wireless  LANs  with  to¬ 
day’s  40-bit  Wired  Equivalent 
Privacy  security.  I 


Reporter  Dan  Verton  contrib¬ 
uted  to  this  story. 


Better  Safe 
Than  Sorry 

TIPS  ON  SECURING  YOUR 
WIRELESS  LAN: 

■  Make  sure  built-in  40-bit 
WEP  security  is  turned  on.  The 
factory  default  is  “off,”  but  a 
security  audit  will  quickly  help 
determine  if  this  is  the  case. 

■  View  wireless  LANs  as  you 
would  the  Internet.  Don’t  host 
any  systems  or  provide  access  to 
data  on  a  wireless  LAN  that  you 
wouldn't  put  on  the  Internet. 

■  Retrofit  existing  wireless 
LANs  with  at  least  128-bit 
encryption. 

■  Incorporate  proposed  802.1x 
standards  into  your  wireless 
LANs.  Major  vendors  currently 
offer  products  that  include  rapid 
rekeying  and  message  integrity 
check. 

■  Encrypt  all  traffic  over  the 
LAN  with  a  VPN  running  at  least 
FIPS-141  triple  DES. 

■  Follow  the  feds.  As  soon  as 
new  hardware  (or  software)  is 
available,  upgrade  existing  ac¬ 
cess  points  and  devices  so  they 
can  use  the  Advanced  Encryp¬ 
tion  Standard  (FIPS-142),  the 
method  of  choice  for  federal 
agencies  planning  wireless  LAN 
deployments. 

■  Make  sure  the  network  door 
is  closed.  Firewall  all  systems 
connected  to  wireless  LANs  and 
ensure  that  they  are  password- 
protected. 


For  more  on  he 
pervasiveness  of 
wireless  LANs,  visit 
our  Web  site: 

www.computerworld.com/q726942 


Enhancing  Wireless  LAN  Security 

On  Jan.  25,  IEEE  802.11  Task  Group  I  approved  the  Temporal  Key 
Integrity  Protocol  as  an  optional  802.1x  standard. 


*  Temporal  Key  Integrity  Protocol 
(TKIP)  provides  for  initialization 
vector  hashing  to  help  defeat  passive 
packet  snooping.  It  also  provides 
a  Message  Integrity  Check  to  help 
determine  whether  an  unauthorized 
user  has  modified  packets  by  inject¬ 


ing  traffic  that  enables  key  cracking. 

■  TKIP  includes  use  of  dynamic  keys 
to  defeat  capture  of  passive  keys  - 
a  widely  publicized  hole  in  the  exist¬ 
ing  Wired  Equivalent  Privacy  (WEP) 
standard. 


■  Task  Group  I  is  still  assessing  which 
parts  of  the  Advanced  Encryption 
Standard  (AES)  protocol  -  which  has 
been  adopted  by  the  National  Insti¬ 
tute  of  Standards  and  Technology  - 
to  use  in  802.11  wireless  LANs. 

■  Task  Group  I  will  hold  its  next 
meeting  on  Feb.  11-12  to  finalize  the 
draft  text.  It  will  then  prepare  a 
letter  ballot  for  approval  of  final 
standards. 


■  Some  vendors  are  already  starting 
to  incorporate  TKIP  in  new  products. 
Old  products  can  be  retrofitted  with  a 
firmware  upgrade. 

■  Expect  products  with  AES  built  into 
silicon  within  a  year.  Software  up¬ 
grades  will  take  less  time  but  will 
also  degrade  throughput  due  to  larger 
key  sizes  (128-bit  minimum  vs. 

40  bits  for  WEP)  and  configuration 
of  algorithms. 


ONLINE  RESOURCES: 

■  IEEE  802.11  Task  Group  I 

http://grouper.ieee.org/groups/ 

802/TI/index.htmt 

■  Advanced  Encryption 
Standard 

http://csrc.nist.gov/ 

encryption/aes/ 
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Airline  Web  Sites  Seen  as 

Riddled  With  Security  Holes 


But  one  airline  is  taking  steps  to  protect 

itself  against  browser-based  attacks 


BY  DAN  VERTON 

ncreasing  concerns 
about  the  potential  for 
hackers  to  manipulate 
critical  back-end  admin¬ 
istrative  systems  through 
security  holes  commonly  found 
in  corporate  Web  sites  have 
prompted  at  least  one  major 
airline  to  take  preventive  mea¬ 
sures. 

“We  are  trying  to  defend  our 
Web  sites,”  said  David  Yaacobi, 
information  systems  security 
manager  at  El  A1  Israel  Airlines 
at  Ben-Gurion  International 
Airport  in  Lod,  Israel.  “Hack¬ 
ers  could  go  inside  your  Web 
sites  and  inject  wrong  or  mali¬ 
cious  code.” 

El  A1  has  deployed  Sanctum 
Inc.’s  AppShield  3.1  Web  ap¬ 
plication  firewall  technology. 


That  deployment  comes  on  the 
heels  of  a  security  audit  of  a 
major  U.S.  airline  conducted 
by  the  Santa  Clara,  Calif.-based 
vendor.  According  to  Sanctum 
CEO  Peggy  Weigle,  during  that 
audit  the  airline’s  Web-based 
systems  were  breached.  The 
security  team  that  conducted 
the  audit  managed  to  make  its 
way  into  the  airline’s  back-end 
systems,  including  the  reserva¬ 
tion  and  maintenance  systems, 
Weigle  said. 

“Through  a  hole  in  the  [front- 
end]  application  code,  we  were 
able  to  get  to  the  back-end  sys¬ 
tems  and  able  to  download  the 
source  code  of  the  entire  appli¬ 
cation,”  said  Weigle.  “We  could 
have  obviously  obtained  pas¬ 
senger  manifests,  maintenance 
systems  and  whatever  was 


there.”  The  airline,  which  Wei¬ 
gle  refused  to  identify  for  secu¬ 
rity  reasons,  still  hasn’t  fixed 
the  problems,  she  said. 

Dan  Meehan,  CIO  of  the 
Federal  Aviation  Administra¬ 
tion,  said  he  received  a  briefing 
on  the  audit  from  Weigle  and 
noted  that  the  FAA  is  working 
with  the  White  House  to  devel¬ 
op  a  more  aggressive  outreach 
program  focused  on  the  air¬ 
lines.  “We  want  to  take  this 
specific  piece  of  information 
and  compare  notes  with  a  few 
other  airlines  to  see  if  this  is  an 


isolated  case  or  not,”  said 
Mehan.  However,  he  said,  it’s 
too  early  to  tell  whether  the 
audit  did  in  fact  uncover  a  sig¬ 
nificant  breach  of  security. 

For  his  part,  Yaacobi  isn’t 
taking  any  chances.  Although 
El  Al’s  reservation  systems  run 
on  protocols  that  are  “totally 
different  than  [standard  Inter¬ 
net  protocols]  and  are  very  dif¬ 
ficult  to  hack,”  Yaacobi  said  the 
potential  is  still  there,  and  El  A1 
does  whatever  is  necessary  to 
protect  them. 

“Since  Sept.  11,  any  illegal 
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How  Hackers  Get  In 

Browser-based  attacks  exploit  bugs  and  holes  in  Web-based 
application  code.  Vulnerable  software  includes: 

■  User  interface  code,  which  provides  the  look  and  feel  of  the  site. 

■  The  Web  server,  which  supports  the  physical  communication 
between  the  user’s  browser  and  the  applications. 

■  The  front-end  system,  which  interfaces  directly  with  the 
user  interface  code,  operating  system  and  back-end  systems. 


access  to  data  or  transactions 
through  our  company  Web  site 
is  viewed  by  us  as  a  terrorist 
act,”  said  Yaacobi.  “With  regu¬ 
lar  attempted  attacks  on  our 
site,  we  view  Web  application 
security  critical  to  our  overall 
security  plan  ensuring  the 
safety  of  our  customers.” 

Various  Israeli  government 
agencies  deployed  AppShield 
during  the  2000  cyberconflict 
between  pro-Palestinian  and 
Israeli  hackers. 

John  Pescatore,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.,  said  Web  application 
security  is  a  serious  problem 
for  two-thirds  of  all  corporate 
Web  sites. 

“The  current  generation  of 
firewalls  focuses  on  the  net¬ 
work  level,  kind  of  like  the 
walls  of  a  fort  stopping  direct 
attack,”  said  Pescatore.  “How¬ 
ever,  close  to  75%  of  today’s 
attacks  are  tunneling  through 
applications.  Application-level 
firewalls  are  something  that 
any  critical  infrastructure 
company  needs  to  look  at.”  I 


Quick 

Link© 


IT  executives  meet 
with  DOT  Secretary 
Norman  Mineta  to  dis¬ 
cuss  airline  security: 


www.computerworid.com/q726929 


Microsoft  Taps  Former  DO  J  Cybercop 


Charney  to  head 
company's  security 

BY  DAN  VERTON  AND 
DEBORAH  RADCLIFF 

Microsoft  Corp.  last  week 
named  Scott  Charney,  the  for¬ 
mer  chief  of  computer  crime  at 
the  U.S.  Department  of  Justice 
(DOJ)  and  a  partner  at  New 
York-based  Pricewaterhouse- 
Coopers,  as  its  new  chief  se¬ 
curity  strategist.  He  replaces 
Howard  Schmidt,  who  left  the 
company  Jan.  28  to  join  the 
Bush  administration. 

The  announcement  came 
late  Jan.  31  after  Computer- 
world'  s  Web  site  broke  the 
news  of  Charney’s  appoint¬ 
ment  earlier  in  the  day.  Char¬ 
ney,  who  had  confirmed  his 
selection  in  a  telephone  inter¬ 


view,  assumes  his  new  position 
April  1. 

The  change  in  title  from 
chief  security  officer  to  chief 
security  strategist  doesn’t  indi¬ 
cate  a  major  shift  in  responsi¬ 
bilities,  said  Charney.  Rather, 
it’s  “actually  a  more  accurate 
description  of  the  role  Howard 
had  been  filling,”  he  said.  “I 
will  be  working  to  secure  prod¬ 
ucts  and  services  and  develop¬ 
ing  domestic  and  international 
polices  that  support  a  more 
secure  infrastructure.” 

Microsoft  officials  declined 
to  comment  on  the  appoint¬ 
ment  at  first,  but  later  issued  a 
statement  touting  Charney’s 
credentials. 

“As  one  of  the  industry’s  top 
computer  security  experts, 
Scott  has  wide-ranging  experi¬ 
ence  in  cybercrime  and  com¬ 
puter  forensics,  which  will 


make  him  an  essential  mem¬ 
ber  of  Microsoft’s  Trustworthy 
Computing  leadership  team,” 
said  Craig  Mundie,  chief  tech¬ 
nical  officer  at  Microsoft. 

Sources  close  to  the  inter¬ 
view  process  said  that  while 
they  wouldn’t  necessarily  place 
Charney  on  the  short  list  of 
top  IT  security  experts  in  the 
country,  he  landed  the  job 
because  of  his  long  career  at 
the  DOJ,  where  he 
earned  a  reputation 
as  a  skilled  and 
staunch  antihacking, 
cybercrime  hardliner. 

“I  realized  that 
[one  Microsoft  exec¬ 
utive]  in  particular 
was  looking  for 
someone  with  signif¬ 
icant  [government] 
ties  and  current  con¬ 
tacts,”  said  a  source 


close  to  the  selection  proc¬ 
ess.  Microsoft  “saw  Howard 
[Schmidt]  as  unique  and  want¬ 
ed  to  define  the  position 
around  their  real  needs  and 
the  strengths  of  the  new  [ex¬ 
ecutive].” 

Schmidt  left  Microsoft  to 
become  vice  chairman  of  the 
President’s  Critical  Infrastruc¬ 
ture  Protection  Board  and  is 
admired  by  many  throughout 
industry  and  government  for 
having  a  rare  combination  of 
technical  and  interpersonal 
skills,  especially  on  Capitol 
Hill. 

Eric  Friedberg,  a 
former  computer 
crimes  coordinator  at 
the  DOJ  who  report¬ 
ed  to  Charney  in¬ 
directly,  called  him 
one  of  the  “shining 
lights”  in  information 
security.  “He’s  got 
national  credibility,” 
said  Friedberg,  who 
credited  Charney 


with  developing  the  DOJ’s 
computer  crime  and  intellec¬ 
tual  property  division. 

Alan  Paller,  research  direc¬ 
tor  at  the  SANS  Institute  in 
Bethesda,  Md.,  said  Charney 
is  the  best  candidate  to  carry 
on  Schmidt’s  Trusted  Com¬ 
puting  initiative  —  not  be¬ 
cause  of  his  technical  back¬ 
ground  but  because  of  his 
experience  at  the  DOJ. 

“Remember  the  job  [Char¬ 
ney]  has  to  do.  He  has  to 
get  marketing-driven  develop¬ 
ment  people  to  delay,  assess 
and  correct  their  tools  so  they 
do  not  cause  harm  to  the 
outside  world,”  Paller  said. 
“[Charney]  is  probably  the 
best  guy  in  the  country  to  pull 
that  off,  because  he  comes 
from  the  purest  understanding 
of  the  damage  that  the  bad 
guys  do.  What  a  brilliant 
choice,  because  you  have  to 
prove  to  some  very  strong- 
willed  people  that  it’s  worth 
doing  this  right."  > 


CHARNEY  knows 
“the  damage  that 
the  bad  guys  do.” 
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WARNING 


THIS  FACILITY  IS 

SUBJECT  TO 

SUDDEN  SHIFTS 

IN  SCALE. 


When  you  think  scalability,  it’s  time  to  think  software. 
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Today’s  Web-driven  world  demands  a  faster  way  to  scale  up 
and  out.  But  instead  of  thinking  hardware,  it’s  time  to  think  smarter 
software,  as  in  the  modular  and  scalable  Microsoft®  server  platform. 


The  Microsoft  server  platform  gives  you  the  choice  of  thinking 
bigger,  smaller,  up,  or  out.  That  way  you  can  deploy  Microsoft  SQL 
Server™  2000  on  Windows®  2000  Datacenter  Server  for  heavy- 


THINK  UPTIME  “Microsoft  provides  scalable  and  reliable 
products  at  an  unbeatable  price  with  the  ability  to  scale  out, 
not  just  up.  As  a  result  we  are  able  to  add  new  servers  without 
costly  downtime.”  —  Don  Heckman,  VP,  Engineering  Program 
Management,  Qwest 


duty  ERP  and  transaction  processing,  and  scale  up  to  support 
terabytes  of  data  and  millions  of  transactions.  Or  scale  out  with 
Microsoft  Application  Center  2000  by  adding  clusters  of  Windows 


liansaction  Processing  Performance  Council.  October  2001.  ©  2002  Microsoft  Corporation.  All  rights  reserved.  Microsoft  and  Windows  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be 


2000-based  servers  running  distributed  applications.  And  it  has 
the  lowest  price-to-performance  ratio  of  any  competitive  platform* 
So  no  matter  how  quickly  things  change,  your  business  is 
always  perfectly  scaled  to  handle  it.  For  more  ways  to  scale 
up— and  out— with  software,  visit  us  at  microsoft.com/servers 
/scalability  Software  for  the  Agile  Business. 


|  trademarks  of  their  respective  owners. 
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Lotus  Ties  Notes,  Domino 

To  Java  for  Web  Services 


Messaging,  collaboration  releases  will  support  J2EE  specification 


BY  JENNIFER  DlSABATINO 

LAKE  BUENA  VISTA.  FLA. 

Using  java  2  En¬ 
terprise  Edition 
(J2EE)  as  the 
linchpin,  Lotus 
Software  Group 
and  parent  IBM  last  week  laid 
out  an  integrated  collaboration 
and  Web  services  strategy  for 
Notes  and  Domino.  The  plan 
made  some  large  users  happy 
but  left  smaller  customers 
wondering  how  it  will  affect 
their  development  strategies. 

At  its  annual  Lotusphere 
user  conference  here,  Lotus 
announced  that  it  is  basing  its 
Web  services  strategy  on  J2EE. 
Notes  6  and  Domino  6  will 
support  the  specification  and 
include  J2EE-compatible  de¬ 
velopment  tools  when  they’re 
released  for  beta  testing  this 
month.  Shipments  are  due  to 
start  in  the  third  quarter. 

Large  Lotus  customers,  such 
as  Hewitt  Associates  LLC  in 
Lincolnshire,  Ill.,  and  Amster¬ 
dam-based  Philips  Electronics 
NV,  were  heavily  consulted  on 
the  J2EEplan. 

Frank  Butstraen,  head  of  col¬ 
laboration  and  Web  services 
initiatives  at  Philips,  said  he 
plans  to  make  significant  in¬ 
vestments  to  integrate  Domino 
with  Web  services.  By  using 
J2EE  as  a  standard,  Lotus  will 
allow  Philips  to  cut  out  some 
of  the  expensive,  third-party 
middleware  technologies  it 
now  uses,  he  said. 

Likewise,  Scott  Pitt,  manager 
of  the  knowledge  management 
group  at  Hewitt,  said  the  J2EE 
announcement  came  as  no  sur¬ 
prise  to  his  company,  which 
plans  to  build  Web  services  ap¬ 
plications  on  top  of  Domino  6. 
One  of  the  goals  of  the  new 

{  'Vj  N.  Jr  To  read  about  Lotus' 

V  AllLlv  battle  with  Microsoft 

T  for  messaging  mar- 

i_.il  ket  share,  visit: 

www.cfl'TiputBrworld.eom/q?26934 


strategy  is  to  entice  users  to 
run  all-IBM  software  shops  by 
making  it  easier  to  integrate 
Domino  and  Notes  with  IBM’s 
WebSphere  application  server 
and  the  system  management 
tools  developed  by  IBM  sub¬ 
sidiary  Tivoli  Systems  Inc. 

“I’m  not  going  to  say  that 
they’ve  got  every  piece  of  the 
puzzle,  but  they’ve  got  a  lot  of 
them,”  said  Dana  Gardner,  an 
analyst  at  Aberdeen  Group  Inc. 
in  Boston. 

Eugene  Stein,  director  of 
information  and  professional 
services  at  New  York  law  firm 
Shearman  &  Sterling,  said  he  is 


looking  for  reassurance  from 
Lotus  that  his  investment  in 
Domino  will  be  protected  as  he 
moves  forward  with  Web  ser¬ 


vices.  With  J2EE,  that  appears 
to  be  the  case,  he  said. 

But  Domino  6  won’t  have 
the  native  ability  to  put  some 
J2EE-compliant  applications  in 
Web  containers,  which  use 
servlets,  Java  server  pages  and 
Enterprise  JavaBeans  to  push 


In  addition  to  support  for  J2EE,  IBM  and  Lotus  plan  to  include 


FOR  END  USERS:  Roaming  user  and  multiuser  support:  improved  wireless 

access;  updated  mail  and  calendar  user  interfaces 

— 

FOR  DEVELOPERS:  Integrated  connections  to  external  data:  added  support 
for  Web  development  features 

— 

FOR  ADMINISTRATORS:  Improved  transaction  logging,  clustering  and  net¬ 
work  compression:  remote  management  and  security  enhancements 


Oracle  Puts  Limits  on  New  Software  Pricing 


Users  must  spend 
$250,000  to  qualify 


BY  MARC  L.  SON6INI 

Looking  to  assuage  user  con¬ 
cerns,  Oracle  Corp.  last  week 
finally  offered  up  details  on  its 
new  flat-fee  business  applica¬ 
tions  pricing  scheme  —  in¬ 
cluding  a  $250,000  minimum 
purchase  requirement. 

Companies  will  also  have  to 
buy  software  licenses  for  at 
least  20%  of  their  workers  to 
qualify  for  the  flat-fee  pricing 
(see  chart).  Jacqueline  Woods, 
vice  president  of  global  prac¬ 
tices  at  Oracle,  said  the  new 
approach  is  an  attempt  to  re¬ 
duce  costs  and  licensing  com¬ 
plexities  for  large  companies 
that  are  standardizing  on  its 
E-Business  Suite  lli  software. 

Oracle  claimed  companies 
that  qualify  could  cut  the  prices 
they  pay  by  up  to  75%  per 
user  through  the  new  pricing, 
which  sets  all-encompassing 
lli  license  fees  of  $4,000  for 
full-fledged  users  and  $400 


for  workers  who  need  to 
access  only  such  things  as 
e-procurement  and  employee 
self-service  applications. 

The  move  to  clarify  how  the 
new  scheme  works  came  two 
weeks  after  Oracle  CEO  Larry 
Ellison  announced  the  flat-fee 
plan  without  fully  spelling  out 
what  it  would  entail.  But  some 
users  said  they’re  still  not  sure 
whether  the  new  pricing  will 
benefit  them. 

Jeremy  Young,  president  of 
the  Atlanta-based  Oracle  Appli¬ 
cations  Users  Group  (OAUG), 
said  the  independent  organiza¬ 
tion  continues  to  have  ques¬ 
tions  about  what  the  flat-fee 
scheme  means  for  users. 

“So  far,  we’re  still  not  com¬ 
pletely  clear,”  he  said.  “We’d 
like  to  see  some  [real]  exam¬ 
ples  ...  so  we  can  do  compar¬ 
isons.”  Some  OAUG  members 
were  having  trouble  getting 
price  quotes  from  Oracle’s 
sales  force,  added  Young,  a 
business  process  manager  at 
DHL  Worldwide  Network  NV 
in  Brussels. 

In  a  preliminary  statement 


about  the  new  approach,  the 
OAUG’s  pricing  council  said 
Oracle’s  stated  objective  is  to 
lower  costs  for  users  that  buy 
the  full  lli  suite.  “This  pricing 
model  seems  to  favor  business¬ 
es  that  adopt  that  philosophy,” 
the  council  said. 

Ken  Gordon,  an  IT  manager 
for  the  city  government  of 
Oakland,  Calif.,  said  he  plans  to 
upgrade  to  lli  by  year’s  end. 


Details,  Details 

How  Oracle’s  new  flat-fee 
pricing  works: 

■  Licenses  for  “professional” 
users  who  need  full  access  to  one 
or  more  applications  are  priced  at 

$4,000  per  person. 

■  Fees  for  users  who  need  only 
self-service  tools,  such  as  Oracle's 
expense-reporting  module,  are 
priced  at  $400  per  worker. 

■  To  qualify,  companies  have  to 
spend  at  least  $250,000  and  buy 
licenses  for  20°/o  of  their 
employees.  Half  of  those 
must  be  for  professional  users. 


applications  out  to  the  Web. 
WebSphere  development  tools 
will  have  to  be  used  for  that. 

Some  developers  expressed 
concern  about  that  scenario 
during  a  session  at  the  confer¬ 
ence  on  J2EE  development  in 
Domino  6.  But  Jeff  Calow,  a 
senior  technical  staff  member 
for  messaging  and  collabora¬ 
tion  at  Lotus,  said  IBM’s  Web¬ 
Sphere  Developer  software 
will  be  bundled  with  Domino  6 
at  no  extra  cost. 

IBM  continues  to  offer  col¬ 
laborative  tools  that  can  be 
used  in  mixed  application  en¬ 
vironments,  said  Daniel  Ras¬ 
mus,  an  analyst  at  Giga  Infor¬ 
mation  Group  Inc.  in  Cam¬ 
bridge,  Mass.  That  differenti¬ 
ates  it  from  rival  Microsoft 
Corp.  and  lets  users  deploy 
products  such  as  Lotus’  Quick- 
Place  online  meeting  software 
without  using  Domino  and 
Notes  as  their  collaborative 
and  messaging  infrastructure, 
Rasmus  added.  I 


But  the  city’s  IT  budget  is  ap¬ 
proved  well  in  advance  of  such 
projects,  and  he  said  any  pric¬ 
ing  changes  that  impact  the 
budget  “could  be  devastating.” 

However,  Woods  said  Oracle 
will  maintain  its  current  “com¬ 
ponent”  pricing,  in  which  ap¬ 
plications  are  sold  individually, 
for  users  who  don’t  qualify 
for  the  flat-fee  model  or  don’t 
want  to  buy  the  full  Hi  suite. 

The  flat-fee  pricing  was  due 
to  take  effect  Friday,  Woods 
said.  In  a  switch  from  what 
Ellison  announced,  the  license 
fees  don’t  distinguish  between 
“power”  users  and  “casual” 
users.  Anyone  who  uses  the 
core  functionality  of  an  appli¬ 
cation  would  need  to  have  the 
more  expensive  “professional” 
license,  according  to  Woods. 

The  $4,000  fee  for  full  appli¬ 
cation  access  is  a  bargain  for 
companies  with  users  who 
need  to  access  multiple  Hi  mod¬ 
ules,  said  Erin  Kinikin,  an  ana¬ 
lyst  at  Giga  Information  Group 
Inc.  in  Cambridge,  Mass.  But 
it’s  not  so  attractive  for  users 
who  work  with  only  one  appli¬ 
cation,  she  added.  I 


Joris  Evers  of  the  IDG  News  Ser¬ 
vice  contributed  to  this  report. 
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Ms  wanted  valuable 
customer  information;  at 
the  push  of  a  button. 

(You  know  elevator  people.)] 


Cognos  —  the  business  intelligence  inside 
the  world's  most  intelligent  businesses. 
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Allmerica  Taps  Keane 
For  Application  Work 

Worcester,  Mass.-based  Allmerica 
Financial  Corp.  signed  a  seven-year 
deal  to  outsource  development  and 
maintenance  of  applications  for  its 
property  and  casualty  insurance 
systems  to  Keane  Inc.  About  140 
Allmerica  IT  workers  are  being 
transferred  to  Boston-based  Keane 
as  part  of  the  deal,  which  comes  13 
months  after  the  companies  signed 
a  similar  agreement  for  Allmerica’s 
variable  annuity  unit. 


Microsoft:  Win  2000, 
NT  4.0  Domain  Flawed 

Microsoft  Corp.  warned  that  a  flaw 
in  the  way  its  Windows  2000  and 
Windows  NT  4.0  server  operating 
systems  authenticate  users  across 
domains  could  allow  a  user  with  ad¬ 
ministrator  privileges  to  extend  that 
power  to  other  domains.  The  vulner¬ 
ability  is  “extremely  difficult”  to  ex¬ 
ploit,  Microsoft  said,  but  it  added 
that  the  worst-case  scenario  posed 
by  the  flaw  is  serious. 


U  to  Play  Big  Role 
In  Railroad  Project 

Brookings,  S.D.-based  Dakota,  Min¬ 
nesota  &  Eastern  Railroad  Corp.  said 
it  plans  to  rely  heavily  on  technology 
as  part  of  a  $1.5  billion,  880-mile 
railroad  construction  project  in 
Wyoming  and  South  Dakota.  The 
project  will  include  computer  model¬ 
ing  of  train  operations  and  the  devel¬ 
opment  of  a  communications-based 
control  system,  the  company  said. 


Short  Takes 

Santa  Clara,  Calif.-based  PALM 
INC.  announced  a  handheld  device 
with  built-in  wireless  capabilities 
that’s  designed  to  provide  secure 
links  to  corporate  e-mail  servers. 

. . .  INTEL  CORP.  and  HEWLETT- 
PACKARD  CO.  said  they  plan  to 
support  an  effort  to  create  an  open- 
source  version  of  MICROSOFT’S  In¬ 
ternet-based  .Net  technology. 


IT  Managers  Make  HA  I 
Projects  a  Top  Priority 


Application  integration  gains  in  importance , 
but  packaged  tools  still  a  challenge  to  use 


BY  MICHAEL  MEEHAN 

OR  SOME  large  com¬ 
panies,  the  need  to 
tie  together  incom¬ 
patible  systems  has 
grown  to  the  point 
that  the  main  mission  of  their 
IT  departments  is  shifting  from 
application  development  and 
support  to  integration. 

Users  such  as  Corporate  Ex¬ 
press  Inc.,  Best  Buy  Co.  and 
Union  Pacific  Corp.  said  they 
no  longer  have  any  choice 
about  braving  the  rigors  of 
building  an  enterprise  appli¬ 
cation  integration  (EAI)  infra¬ 
structure.  EAI  tools  still  have 
a  reputation  as  being  difficult 
to  use,  but  IT  managers  at 
those  companies  said  trying  to 
cope  with  “application  spa¬ 
ghetti”  is  worse. 

“We  really  need  to  make  in¬ 
tegration  a  central  part  of  every 
IT  initiative,”  said  Marty  Mal- 
ley,  director  of  information  sys¬ 
tems  at  Omaha-based  Union 
Pacific.  For  example,  he  said, 
the  railroad  has  to  find  a  way  to 
deliver  real-time  pricing  infor¬ 
mation  from  its  systems  to 
freight  customers  in  the  oil  and 
gas  industries. 

“That  price  data  touches 
many  internal  systems,  and 
now  we’ve  got  to  find  a  way  to 
tie  it  all  together,”  Malley  said. 


Correction 

A  story  included  in  the  Jan.  21 
Knowledge  Center  on  Enter¬ 
prise  Networking  [“Inspecting 
the  Net"]  misidentified  a  service 
used  by  Global  Sports  Inc.  Glob¬ 
al  Sports  uses  Keynote  Systems 
Inc.’s  Web  Site  Perspective  net¬ 
work  monitoring  service,  not 
Keynote’s  Red  Alert. 


In  November,  Union  Pacific 
began  working  with  EAI  tools 
developed  by  Palo  Alto,  Calif.- 
based  Tibco  Software  Inc. 

Once  in  place,  the  integra¬ 
tion  framework  will  also  be 
used  to  help  migrate  compo¬ 
nents  of  the  railroad’s  core 
transportation  control  system 
off  of  its  mainframes.  But  Mal¬ 
ley  said  the  railroad  hasn’t  set  a 
full  road  map  for  the  EAI  work. 
He  also  wouldn’t  comment  on 
the  project’s  expected  cost. 

EAI  Expansion 

Monty  Sooter,  CIO  at  Corpo¬ 
rate  Express,  said  EAI  technol¬ 
ogy  will  play  a  role  in  all  four 
of  the  major  IT  projects  the 
Broomfield,  Colo.-based  office 
supplies  distributor  plans  to 
take  on  this  year.  “We  made  a 
business  decision  that  the  [in¬ 
tegration]  infrastructure  has  to 
be  correct,”  Sooter  said.  “If  it’s 
not,  we’re  not  going  to  be  able 
to  move  forward.” 

In  a  project  that  began  18 
months  ago,  Corporate  Ex¬ 
press  initially  used  EAI  tools 
developed  by  Fairfax,  Va.- 
based  webMethods  Inc.  to  in¬ 
tegrate  its  systems  with  the 
business-to-business  applica¬ 
tions  of  120  large  customers. 

Now,  Sooter  said,  the  com¬ 
pany  plans  to  use  the  tools  in 
rollouts  of  Dallas-based  i2 
Technologies  Inc.’s  online  pro¬ 
curement  and  warehouse  man¬ 
agement  applications.  They 
will  also  be  used  as  part  of  proj¬ 
ects  aimed  at  improving  infor¬ 
mation  feeds  to  Corporate  Ex¬ 
press’  suppliers  and  for  devel¬ 
oping  an  online  system  for  pay¬ 
ing  its  sales  force.  The  EAI 
layer  will  funnel  data  among 
various  databases  and  front-end 
system  interfaces,  Sooter  said. 

Tyler  McDaniel,  an  analyst 
at  Hurwitz  Group  Inc.  in  Fram- 


We  really 
need  to  make 
integration  a 
central  part 
of  every  IT 
initiative. 

MARTY  MALLEY.  DIRECTOR  OF 
INFORMATION  SYSTEMS, 
UNION  PACIFIC 

ingham,  Mass.,  said  early  ver¬ 
sions  of  EAI  tools  were  diffi¬ 
cult  to  use.  But  improved  busi¬ 
ness  object,  repository  and 
graphical  user  interface  capa¬ 
bilities  have  lessened  their  ar¬ 
cane  nature,  he  said. 


Steve  Kaufman  and  his  staff  have 
entered  EAI  boot  camp. 

Kaufman,  director  of  IT  infra¬ 
structure  for  the  Goshen,  Ind.- 
based  Mennonite  Mutual  Aid  As¬ 
sociation,  is  responsible  for  devel¬ 
oping  an  integration  framework 
based  on  tools  from  Vitria  Tech¬ 
nology  Inc.  in  Sunnyvale,  Calif. 

The  EAI  setup  is  expected  to  help 
the  health  care  organization 
migrate  its  core  applications  from 
IBM  AS/400s  to  Windows  NT 
servers  and  more  than  double  its 
system-to-system  interfaces  over 
the  next  five  years. 

But  Kaufman  said  IT  workers 
at  Mennonite  Mutual  Aid  are  still 
learning  how  to  use  Vitria’s  tools, 
a  process  that  will  likely  take  sev¬ 
eral  more  months.  “It’s  complex 
software,  and  there’s  lots  of  train¬ 
ing  involved,"  he  said.  “It’s  going 
to  be  a  while  before  we  can  do 
any  testimonials." 

The  IT  team  at  Best  Buy  started 


However,  EAI  projects  can 
still  be  long  and  hard. 

For  example,  Best  Buy  plans 
to  use  webMethods’  tools  to 
patch  its  electronic  data  inter¬ 
change  (EDI)  trading  partners 
into  a  new  Windows  2000 
server  backbone  that’s  being 
installed  to  run  its  inventory 
and  financial  systems. 

The  Eden  Prairie,  Minn.- 
based  electronics  retailer  has 
such  a  heavy  volume  of  EDI 
transactions  that  it’s  running 
short  of  the  nightly  downtime 
needed  to  complete  its  batch 
processing,  said  Patricia  Ves- 
sey,  e-business  communica¬ 
tions  manager  at  Best  Buy. 

The  webMethods  tools  will 
translate  data  among  various 
systems  for  real-time  transac¬ 
tion  processing  of  pin-chase  or¬ 
ders  and  invoices,  Vessey  said. 
But  she  estimated  that  it  will 
take  two  years  to  do  the  re¬ 
quired  data-conversion  work.  I 


learning  the  ins  and  outs  of  web¬ 
Methods’  EAI  software  in  August. 
“We’re  finding  it’s  complex,  but  we 
need  to  leam  it  if  we  want  quicker 
reconciliation  and  better  data  accu¬ 
racy  in  our  e-commerce  systems.” 
said  David  Nelson,  products  capa¬ 
bilities  manager  at  Best  Buy. 

Best  Buy  wants  to  convert  its 
EDI  trading  documents  to  an  XML 
format.  But  that  will  require  de¬ 
tailed  data-mapping  work.  Nelson 
said.  He  added  that  the  company 
also  needs  to  set  well-defined 
workflow  routines  for  the  data  that 
it  plans  to  funnel  through  the  EAI 
infrastructure.  The  data  comes 
from  more  than  600  suppliers. 

Also,  since  XML  lacks  EDI’s 
maturity,  it  doesn’t  cover  all  of  the 
same  trading  contingencies.  Nel¬ 
son  noted  that  webMethods  has 
pledged  to  address  any  problems 
that  may  arise  as  Best  Buy  goes 
through  the  mapping  process. 

-  Michael  Meehan 


EAI  Adopters  Face  Steep  Learning  Curve 


I 


It  would  have  been  a  great  day  in  Detroit 


too  bad  the  proposal  is  still  in  Denver 


Introducing  the  Xythos  WebFile  Server  3.2 
Internet-enabled  file  management  for  the  enterprise 


Ultimate  File  Access  -  anytime,  anywhere,  quick  &  easy 

•  Superior  Sharing  -  the  right  file  goes  to  the  right  people 

•  Safe  and  Secure  -  supports  existing  security  and  authentication  protocols 

•  Easy  Implementation  -  works  with  existing  network  and  storage  standards 

•  Lower  Costs  -  reduce  your  storage  management  costs  as  you  increase  productivity 

Free  IDC/Xythos  Whitepaper  -  discover  the  best  internet-enabled  file  management  software  / 
for  your  company 


Call  1  888  4XYTHOS  (1  888  499  8467)  or  visit  www.xythos.com/webfile34 


software,  inc 


URGE  JANET  SULE5KI  AMR  RESEARCH  INC.  BOSTON 
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Packaged  Apps  Not 
Always  a  Good  Fit 


Retailers  need  more  scalability,  features 


BY  CAROL  SLIWA 

Retail-sector  cios 
said  last  week  that 
they  still  face  chal- 
lenges  finding 
packaged  software 
to  meet  their  needs,  particular¬ 
ly  in  the  supply  chain  areas. 

Such  difficulties  plagued 
Kmart  Corp.,  which  took  a  $130 
million  write-off  in  September 
for  supply  chain  software  and 
hardware.  The  Troy,  Mich.- 
based  retailer  sought  bank¬ 
ruptcy  protection  last  month 
due  to  business  problems  that 
were  exacerbated  by  the  need 
to  enhance  supply  chain  sys¬ 
tems,  analysts  have  said. 
Retailers  face  such  unique 


Retail  Ware 

Major  systems  that  a  typical 
large  retailer  might  use 
include  the  following: 

Store  systems 

■  Point  of  sale 

■  Time  and  attendance 

■  Loss  prevention 

Headquarters 

■  Merchandise  planning 
and  management 

■  Pricing  and  promotions 
management 

■  Demand  forecasting 

■  Assortment  planning 

■  Space  optimization 

Back-office  systems 

*  Financials 

*  Human  resources 

Supply  chain  systems 

*  inventory  management 

«  Replenishment  management 

*  Transportation  management 

*  Warehouse  management 
a  Supplier  sourcing 

i*  Supply  chain  collaboration 


business  issues  that  they  have 
often  been  forced  to  write  their 
own  software  or  heavily  cus¬ 
tomize  packaged  applications. 
Several  retail  CIOs  said  com¬ 
mercial  offerings  are  improv¬ 
ing,  but  it’s  still  hard  to  find  ad¬ 
equate  supply  chain  software. 

Jerry  Miller,  CIO  at  Sears, 
Roebuck  and  Co.,  said  most  of 
the  Hoffman  Estates,  Ill.-based 
retailer’s  supply  chain  systems 
are  homegrown  because  pack¬ 
aged  applications  haven’t  been 
able  to  scale  to  handle  the  high 
transaction  volume  and  mas¬ 
sive  inventory  Sears  has. 

“There  has  been  some  pro¬ 
gress  in  this  area  by  some  ven¬ 
dors,”  Miller  said,  noting  that 
Sears  is  starting  to  evaluate 
packaged  applications.  “If  it 
can  be  shown  that  we  can  in¬ 
stall,  run  and  support  a  pack¬ 
aged  [product]  less  expensive¬ 
ly  than  homegrown,  we  have 
no  problem  bringing  it  in.” 

But  right  now,  Sears  finds  it¬ 
self  turning  to  in-house  IT 
staffers  to  design  systems  to 
scale  and  integrate  its  applica¬ 
tions,  Miller  said. 

Phillip  Maxwell,  CIO  at  The 
Neiman  Marcus  Group  Inc.  in 
Dallas,  said  his  company  has  45 
stores  —  far  fewer  than  Sears 
or  Kmart  —  but  is  still  “push¬ 
ing  the  limits”  of  some  soft¬ 
ware  packages.  Nevertheless, 
Maxwell  said,  Neiman  Marcus 
will  probably  purchase  a  new 
merchandising  system  in  a 
couple  of  years  to  improve 
data  analysis  capabilities. 

“It  may  not  hit  everything 
that  Neiman  Marcus  wants  to 
do,”  he  said.  But  the  system 
will  provide  a  quicker  way  to 
get  more  functionality,  easier 
upgrades  and  the  chance  to 
lessen  the  need  for  in-house 
development,  Maxwell  said. 

Some  retailers  have  found 
themselves  modifying  pack¬ 
aged  applications  so  heavily 
that  that  they  have  essentially 


rewritten  them.  Kmart,  for  in¬ 
stance,  said  it  extensively  cus¬ 
tomized  a  warehouse  manage¬ 
ment  system  from  Dallas- 
based  Exe  Technologies  Inc.  A 
Kmart  spokeswoman  claimed 
that  the  Exe  package  “was  not 
doing  the  job  we  needed  it  to 
do,”  so  Kmart  decided  to  take  a 
write-off  on  the  software  in 
September,  even  though  it  had 
just  been  installed  in  1997. 

Exe  CEO  Raymond  Hood 
said  his  firm  advised  Kmart 
against  heavy  customization. 
He  contended  that  the  ware¬ 


house  management  system 
could  be  upgraded  and  serve 
the  retailer  well,  as  it  has  at 
other  firms,  including  one  of 
Kmart’s  major  suppliers. 

Several  retail  CIOs  said 
they’re  trying  to  avoid  heavy 
customization.  Wolly  Morin, 
CIO  at  New  York-based  Ann 
Taylor  Retail  Inc.,  said  modify¬ 
ing  packaged  software  can  open 
the  door  to  lots  of  problems. 

Lesson  Learned 

Bill  Finefield,  CIO  at  Vir¬ 
ginia  Beach,  Va.-based  Navy 
Exchange  Service  Command 
(Nexcom),  which  handles  $2 
billion  in  sales  across  112  stores 
and  about  500  selling  loca¬ 
tions,  learned  about  the  dan¬ 
gers  of  customization  the  hard 
way.  In  1993,  prior  to  Fine- 
field’s  arrival,  Nexcom  decided 


Teddy  Bear  Maker  Prepares  for 
Second  Attempt  at  ERP  Rollout 


BY  MARC  L.  SONGINi 

After  a  three-year  saga  that  in¬ 
cluded  a  $10.3  million  financial 
hit  from  the  failed  installation 
of  packaged  applications,  ted¬ 
dy  bear  maker  Russ  Berrie  and 
Co.  is  taking  another  crack  at 
retiring  its  legacy  systems. 

The  Oakland,  N.J.-based  dis¬ 
tributor  of  toys  and  gifts  last 
week  finalized  plans  to  roll  out 
J.D.  Edwards  &  Co.’s  One  World 
Xe  suite  of  enterprise  resource 
planning  (ERP),  customer  rela¬ 
tionship  management  and  fi¬ 
nancial  applications.  The  mul- 
timillion-dollar  project  is 
scheduled  to  be  done  in  phases 
over  the  next  18  months. 

Russ  Berrie  CIO  Michael 
Saunders  said  that  the  compa¬ 
ny,  which  had  sales  of  $225  mil¬ 
lion  during  the  first  nine 
months  of  last  year,  hopes  the 
OneWorld  system  will  help  it 
reach  $1  billion  in  annual  rev¬ 
enue  in  the  coming  years. 

Within  the  next  12  months, 
he  said,  Russ  Berrie  plans  to 
begin  installing  the  applica¬ 
tions  one  department  at  a  time, 
starting  with  a  stand-alone  im¬ 
plementation  in  purchasing. 
“We’re  not  going  big  bang,” 
Saunders  said.  “We’re  mitigat- 


AT  A  GLANCE 


The  Bear 
Necessities 

Russ  Berrie  and  Co.  CIO 
Michael  Saunders  offered  the 
following  advice  to  IT  man¬ 
agers  planning  ERP  projects: 

UNDERSTAND  YOUR  COMPANY'S 
BUSINESS  NEEDS  and  develop  well- 
documented  technical  requirements 
before  considering  proposals  from  vendors. 

MAKE  VENDORS  DO  SOFTWARE 
DEMONSTRATIONS  that  involve  your 
company's  specific  business  processes. 

KEEP  BUSINESS  USERS  INVOLVED  in 

the  decision-making  process  to  ensure  that 
the  software  you  choose  is  a  good  fit. 

ing  implementation  risks  by 
taking  a  phased-in  approach.” 

The  company  has  reason  to 
be  cautious.  Three  years  ago,  a 
Y2k-related  migration  from  its 
homegrown  distribution,  fi¬ 
nancial  and  customer  service 
systems  to  packaged  ERP  ap¬ 
plications  hit  a  brick  wall. 
Saunders  said  the  problems 
were  severe  enough  for  Russ 
Berrie  to  take  many  of  the  new 
applications  off-line. 

That  forced  the  company  to 


to  replace  obsolete,  decentral¬ 
ized  homegrown  systems  with 
packaged  merchandising,  plan¬ 
ning,  distribution,  human  re¬ 
sources  and  financial  systems. 

Some  of  that  software  was  so 
heavily  customized  that  Nex¬ 
com  had  to  do  extra  work  to 
make  it  Y2k-compIiant,  rather 
than  being  able  to  rely  on  the 
vendors’  fixes.  “We  were  guilty 
of  doing  heavy  customization, 
and  we  have  now  learned  our 
lesson,”  Finefield  said. 

Nexcom  now  plans  to  re¬ 
place  two  of  its  5-year-old  ap¬ 
plications  with  a  major  new 
merchandise  package  from 
Minneapolis-based  Retek  Inc. 

Finefield  said  that  this  time, 
Nexcom  will  “go  with  as  pure  a 
product  from  the  vendor”  as 
possible  to  speed  deployment 
and  simplify  maintenance.  I 


resurrect  its  aging  Digital 
Equipment  Corp.  VAX  systems 
and  make  them  Y2k-compli- 
ant.  “It  was  not  a  fun  process,” 
Saunders  said,  adding  that  it 
strained  both  the  IT  depart¬ 
ment  and  business  units. 

Saunders  wouldn’t  identify 
the  software  vendors  that  were 
involved  in  the  failed  imple¬ 
mentation,  but  sources  said 
that  SAP  AG’s  applications 
were  part  of  the  1999  project. 

A  spokesman  at  SAP  con¬ 
firmed  that  Russ  Berrie  was 
one  of  its  customers,  but  he  de¬ 
clined  to  offer  further  details 
because  of  pending  litigation 
between  the  two  companies. 

Joshua  Greenbaum,  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  City,  Calif., 
said  it  appears  that  Russ  Berrie 
“bit  off  more  than  they  could 
chew”  on  the  1999  project. 
Companywide  rollouts  are  es¬ 
pecially  risky  for  midsize  busi¬ 
nesses,  Greenbaum  said. 

In  an  attempt  to  protect  itself 
the  second  time  around,  Saun¬ 
ders  said,  Russ  Berrie  hired  a 
law  firm  with  experience  in 
the  IT  market.  Washington- 
based  Shaw  Pittman  LLP  as¬ 
sisted  the  company  during  the 
software  selection  process. 

Saunders  declined  to  dis¬ 
close  the  exact  cost  of  the  J.D. 
Edwards  project.  Some  limited 
software  customization  work 
will  be  required,  he  said.  ft 
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Picking  Up  the  Pace 

As  part  of  an  effort  to  speed 
up  that  process,  rival  services 
are  offering  to  let  brokerages, 
banks  and  clearinghouses 
match  data  about  trades  via  IP- 
based  virtual  private  networks 
linked  to  back-end  mainframes. 

Omgeo,  which  is  jointly 
owned  by  Depository  Trust  & 
Clearing  Corp.  in  New  York 
and  Thomson  Financial  in  Bos¬ 
ton,  competes  with  the  Global 
Straight  Through  Processing 
Association  (GSTPA)  in  Zurich. 

While  the  Securities  and  Ex¬ 
change  Commission  is  forcing 
Omgeo  and  the  GSTPA  to  set 
up  portals  for  sharing  informa¬ 
tion,  Perna  and  others  in  the  fi¬ 
nancial  services  industry  said 
they  would  rather  see  the  two 
services  combine  to  set  up  a 
single  matching  engine.  “What 
started  out  as  an  absolutely 
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of  months  in  most  cases.  Even  a 
brokerage  or  bank  with  highly 
automated  back-end  systems 
has  to  use  Omgeo’s  applica¬ 
tion  programming  interfaces 
and  messaging  specifications, 
he  noted.  ► 


Tame  unstructured  content 
Create  logical  workflow 
Assure  information  security 

ONE  event  gives  you  ALL  the  power 


Trade  Matching  Causes  Integration  Headaches  for  Banks 


BY  LUCAS  MEARIAN 

One  of  two  companies  vying  to 
offer  automated  trade-match¬ 
ing  capabilities  to  the  brok¬ 
erage  industry  announced  last 
month  that  17  Wall  Street  firms 
have  signed  up  for  its  services. 
But  banks  that  process  stock 
trades  will  likely  end  up  having 
to  integrate  their  back-end  sys¬ 
tems  with  the  networks  of  both 
trade-matching  providers. 

That  prospect  doesn’t  sit 
well  with  Tom  Perna,  senior 
executive  vice  president  of  in¬ 
vestment  services  at  The  Bank 
of  New  York  Co.  “It’s  absolute¬ 
ly  ridiculous  that  we’re  essen¬ 
tially  having  to  do  the  work 
twice,”  he  said. 

For  users  like  Bank  of  New 
York,  such  integration  projects 
are  expected  to  require  mil¬ 
lions  of  dollars  and  thousands 
of  man-hours.  “Relative  to  Y2k, 
it’s  not  as  big,  but  it  is  a  sizable 
undertaking,”  Perna  said. 

Bank  of  New  York  is  one  of 
five  so-called  custodial  banks 
that  signed  up  two  weeks  ago 
to  use  the  trade-matching  ser¬ 
vices  of  Boston-based  Omgeo 
LLC.  The  banks  work  with  bro¬ 
kerages  to  authorize  the  re¬ 
lease  of  funds  that  are  used  to 
cover  stock  trades  as  they  are 
finalized  —  a  process  that  can 
take  several  days. 


great  idea  with  the  GSTPA  has 
turned  into  a  cross-border  po¬ 
litical  nightmare,”  Perna  said. 
Bank  of  New  York  has  al¬ 


ready  begun  work  on  connect¬ 
ing  its  processing  systems  to 
Omgeo’s  matching  engine  and 
expects  to  complete  the  inte¬ 


gration  this  year,  he  added. 

Gary  Foster,  chief  technology 
officer  at  Omgeo,  said  the  inte¬ 
gration  process  takes  a  matter 


Enterprise  Content  Management 

is  what  makes  business  profitable.  AIIM's 
mission  is  to  connect  today's  enterprises 
with  the  ECM  strategies  that  work  best 
for  turning  content  from  documents, 
communications,  and  web  media  into 
powerful  new  e*4yprld  success  —  and 
all-impcpant  security. 
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combination  of  servers  and  operating  systems  that  will  finally  bring  together  your  company's  various 

departments.  Meanwhile,  sales  is  pushing  to  get  the  CRM  software  installed 
by  the  end  of  the  quarter.  Marketing  is  screaming  for  help  with  the  new  Web 
initiative.  Manufacturing  is  late  implementing  the  next  phase  of  the  ERP  system. 
And  you're  stuck  there  in  the  middle  of  the  crossfire,  glancing  around  the  nerve 
center  of  your  enterprise,  waiting  for  the  inspiration  to  arrive. 

It  would  help  if  the  servers  you  were  working  with  were  designed  for 
the  reality  of  today's  complex  business  environment. 

At  HP,  we  always  approach  servers  from  the  systems  level,  taking  the 
extra  time  to  consider  how  they  work  with  your  infrastructure  as  a  whole.  That's 
why  we  offer  a  broad  range  of  server  solutions  that  allow  you  to  choose  the 
ideal  OS  for  your  needs  and  preferences— from  high-end  enterprise  systems  to 
server  appliances  to  blades. 

All  come  bundled  with  sophisticated  management  tools  that  make  it 
easier  for  you  to  manage  your  infrastructure  across  multiple  operating  systems. 
And  as  codeveloper  of  the  next-generation  multi-OS  platform  — the  Itanium™ 
architecture  — HP  is  in  the  unique  position  to  make  future  upgrade  paths  a 
totally  seamless  experience. 

HP  infrastructure  solutions  — servers,  software,  storage,  services  and 
beyond— are  engineered  for  the  real  world  of  business.  Because  the  last  time 
we  checked,  that's  where  we  all  work.  Call  1.80Q.HPASKME,  ext.  246.  Or  visit 
www.  h  p.co  m/g  o/i  n  f  rastructu  re. 

Infrastructure:  it  starts  with  you. 


invent 
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New  Sony  CIO  to  Focus  on  Tighter  Integration 


Plans  to  centralize 
IT  operations ,  push 
common  processes 


BY  JULIA  KING 

Sony  Electronics  Inc.  last 
week  named  James  Milde  as  its 
CIO,  giving  him  responsibility 
for  IT  at  eight  major  manufac¬ 
turing  operations  in  North 
America  and  100  other  facili¬ 
ties  in  the  U.S.  Milde,  41,  fills  a 
job  last  held  by  Bill  Gauld, 
who  left  the  Park  Ridge,  N.J.- 
based  consumer  electronics 
maker  three  months  ago  to 
take  another  job.  Milde  was 
previously  CIO  at  The  Pepsi 
Bottling  Group  Inc.  in  Somers, 


N.Y.  In  his  new  role  at  Sony, 
Milde  will  serve  about  20,000 
users.  He  spoke  with  Comput- 
erworld  about  his  plans  for  the 
company,  which  accounts  for 
about  60%  of  parent  Sony 
Corp.’s  total  revenue. 

What  are  your  top  priorities  going 
into  the  new  job?  First,  getting  to 
know  the  people  in  the  IT  or¬ 
ganization  and  the  business 
people _ There’s  a  great  op¬ 

portunity  here  to  get  tighter 
business  alignment  between 
the  business  functions  and  the 
IT  organization.  We  have  [var¬ 
ious]  legacy  systems  where 
everything  is  done  differently, 
so  there’s  a  huge  opportunity 
to  rethink  the  whole  business 
process.  We  also  have  multiple 


[sales]  channels,  and  in  some 
of  those  channels,  we  also 
have  multiple  business  mod¬ 
els.  We  want  to  move  toward 
common  processes. 

What  kinds  of  IT  projects  will  that 
involve?  The  top  IT  projects 
will  be  in  three  areas.  The  first 
is  order  management  and  or¬ 
der  fulfillment.  We 
have  a  large  project 
in  the  works  with 
Oracle’s  order  man¬ 
agement  [software] 
supporting  our  cus¬ 
tomized  computer 
business.  Another 
big  initiative  is 
around  using  SAP 
[applications]  to 
replace  our  legacy 


order  management  systems 
for  the  electronics  business. 

. . .  There’s  also  a  lot  of  work 
around  data  warehousing  and 
data  mining. 

Are  there  any  particular  challenges 
associated  with  taking  on  a  new 
CIO  position  in  the  midst  of  an  eco¬ 
nomic  downturn?  For  example,  are 
you  under  increased  pressure  to 
demonstrate  a  positive  ROI  from 
technology  investments?  Ab¬ 
solutely.  With  every  project  — 
whether  a  company 
is  fat,  dumb  and  hap¬ 
py  or  economically 
challenged  —  you 
have  to  look  at  proj¬ 
ect  ROI  from  a  capi¬ 
tal  perspective  and 
really  force  the  busi¬ 
ness  case  around  it. 
Too  many  compa¬ 
nies  don’t  put  that 
kind  of  rigor  in  up¬ 


front.  That’s  a  discipline  that, 
if  it’s  not  here,  we’ll  make  sure 
it  gets  put  in  place.  We  also 
want  to  make  sure  we  have  the 
right  processes  in  place  to 
make  sure  big  projects  not 
only  get  funded  but  have  the 
staying  power  to  have  [senior 
management’s]  commitment 
day  in  and  day  out. 

How  will  you  organize,  or  reorga¬ 
nize,  Sony’s  IT  group?  The  IT 

organization  was  very  decen¬ 
tralized.  It’s  by  and  large  the 
reason  we  have  a  lot  of  dis¬ 
parate  legacy  systems  that 
don’t  talk  to  each  other.  As 
part  of  my  accepting  this  posi¬ 
tion,  it  was  important  to  me  to 
have  one  IT  organization  with 
one  culture,  one  set  of  tools 
and  one  set  of  methodologies 
to  build  solutions  going  for¬ 
ward.  So  we  have  [already] 
restructured.  ► 


SONY  CIO  Milde: 
ROI  on  IT  projects 
will  be  a  priority. 


When  choosing  a  technology  partner, _ 

there  are  many  things  to  look  for. 

Always  start  with  this. 

Microsoft • 

CERTIFIED 

Partner 


The  above  logo  represents  the  pinnacle  of  business  technology  in  the  world  today.  The  companies  that  bear  it  are  Microsoft  Certified  Partners, 
and  when  you  encounter  one,  you  encounter  a  professional  proven  to  be  the  best  at  what  they  do.  They  have  the  most  certified  experts  on 
staff,  receiving  their  training,  support  and  tools  directly  from  Microsoft.  They  have  the  broadest  range  of  experience,  having  expertise  in  areas 
such  as  networking,  infrastructure,  collaboration,  and  many  other  leading  disciplines.  And  there’s  a  Microsoft  Certified  Partner  right  near  you. 

To  find  one,  go  to  http://mcspreferral.microsoft.com/ 
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No  Big  Shifts  Expected 
As  IBM  Switches  CEOs 


Palmisano  to  take 
reins  from  Gerstner 

BY  LEE  COPELAND 

ast  week’s  an¬ 
nouncement  that 
Samuel  J.  Palmisano 
will  take  over  as 
IBM’s  CEO  on 
March  1  culminates  a  long 
process  in  which  he 
was  groomed  to  re¬ 
place  top  executive 
Louis  V.  Gerstner. 

Palmisano,  a  29- 
year  IBM  veteran 
who  has  spent  his 
entire  career  at  the 
company,  had  a  big 
hand  in  setting  its 
strategy  while  work¬ 
ing  as  president  and 
chief  operating  officer  for  the 
past  16  months.  As  a  result,  an¬ 
alysts  don’t  expect  him  to  make 
major  changes  in  direction 
right  away. 

Palmisano  also  ran  several 
key  business  units  before  he 
was  picked  for  the  operations 
job,  including  IBM’s  Enterprise 
Systems  Group,  its  PC  busi¬ 


ness  and  its  IT  services  unit. 

Palmisano  has  “certainly 
worn  the  right  hats  to  lead 
IBM,”  said  David  Mastrobat- 
tista,  an  analyst  at  Giga  Infor¬ 
mation  Group  Inc.  in  Cam¬ 
bridge,  Mass.  “When  you  see 
someone  as  the  group  vice 
president  of  so  many  divisions 
at  IBM,  you  know  that  doesn’t 
happen  by  accident.” 

And  unlike  when  Gerstner 
was  brought  in  to  res¬ 
cue  IBM  nine  years 
ago,  Palmisano  isn’t 
taking  over  a  strug¬ 
gling  company.  Al¬ 
though  IBM  reported 
less-than-stellar  re¬ 
sults  for  last  year’s 
fourth  quarter,  it  has 
managed  to  do  better 
financially  than  most 
other  top  technology 
vendors  during  the  current  re¬ 
cession. 

“IBM  is  in  a  good  position 
right  now,”  especially  com¬ 
pared  with  other  server  ven¬ 
dors,  said  Steve  Josselyn,  an 
analyst  at  Framingham,  Mass.- 
based  research  firm  IDC.  He 
described  Palmisano  as  a  solid 
leader  who  understands  the 


RESUME 


Samuel  J. 
Palmisano 

Recent  jobs  held  at  IBM  by 
the  company’s  incoming  CEO 
include  the  following: 

SEPTEMBER  2000  TO  THE 
PRESENT:  President  and  chief 
operating  officer 


OCTOBER  1999  TO  SEPTEMBER 
2000:  Senior  vice  president  of  the 
Enterprise  Systems  Group,  with  respon¬ 
sibility  for  servers  and  storage  devices 


JANUARY  1998  TO  OCTOBER 
1999:  Senior  vice  president  of  IBM 
Global  Services,  the  company's  IT 
services  business 


AUGUST  1997  TO  JANUARY  1998: 

Senior  vice  president  of  the  Personal 
Systems  Group,  which  included  IBM’s 
PC  and  network  computing  units 


JANUARY  1993  TO  AUGUST  1997: 

President  of  Integrated  Systems  So¬ 
lutions  Corp.,  an  outsourcing  sub¬ 
sidiary  that's  now  part  of  IBM  Global 
Services 


INCOMING  IBM  CEO 
Samuel  Palmisano 


Gerstner  Credited  With  Turnaround 


When  Louis  V.  Gerstner  was  hired  as 
IBM’s  CEO  in  1993,  the  short-term 
objective  he  was  given  by  its  board 
of  directors  was  simple,  according  to 
an  internal  memo  he  wrote  last 
week:  “Save  the  company.” 

Gerstner  joined  IBM  in  the  midst 
of  a  deep  crisis.  The  company  was 
losing  money  and  was  thought  to  be 
in  danger  of  going  the  way  of  many 
other  once-dominant  hardware  ven¬ 
dors  that  missed  the  shift  from  pro¬ 
prietary  mainframes  and  minicom¬ 
puters.  Even  the  namesake  IBM  PC 
business  was  passing  IBM  by. 

But  Gerstner  gets  credit  for  turn¬ 
ing  the  company  around.  IBM  still 
isn't  viewed  by  analysts  as  a  high- 
growth  company,  but  it  has  become 
competitive  across  a  broad  range  of 


technologies  where  it  was  previously 
an  also-ran. 

Gerstner  was  also  praised  for  sig¬ 
nificantly  increasing  IBM’s  focus  on 
the  lucrative  IT  services  market,  to 
the  point  where  services  revenue 
surpassed  hardware  sales  during  the 
second  half  of  last  year. 

“In  the  past,  services  was  [an  af¬ 
terthought]  offering  at  IBM,”  said 
Tom  Bittman,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.  "Under  Ger¬ 
stner,  [IBM  Global  Services]  would 
go  out  and  sell  their  strategic  capa¬ 
bilities  and,  by  the  way,  sell  hardware 
and  software.  And  that's  been  great 
for  the  company.” 

Expressing  a  viewpoint  shared  by 
other  analysts,  Bittman  described 
Gerstner  as  a  “buttoned-down  and 


intense”  CEO  who  was  exactly  what 
IBM  needed  as  it  looked  to  cut  costs 
and  overhaul  its  internal  structure. 

He  also  engineered  acquisitions  of 
vendors  such  as  Lotus  Development 
Corp.  and  Tivoli  Systems  Inc. 

Gerstner  came  to  IBM  with  no 
experience  in  the  computing  indus¬ 
try,  having  worked  previously  as  CEO 
of  RJR  Nabisco  Inc.  and  president  of 
American  Express  Co.  in  New  York. 
IBM  said  Gerstner  will  remain  chair¬ 
man  until  the  end  of  the  year,  and  he 
will  then  be  given  a  10-year  consult¬ 
ing  contract. 

IBM  last  week  also  said  that  John 
M.  Thompson,  59,  will  retire  from  his 
position  as  vice  chairman  effective 
Sept.  1.  Thompson  built  up  IBM’s 
software  group  under  Gerstner  and 
is  currently  in  charge  of  business  and 
technology  strategy. 

-  Lee  Copeland 


hardware  side  of  IBM’s  busi¬ 
ness,  which  still  runs  neck- 
and-neck  with  services  for  the 
largest  share  of  the  company’s 
revenue. 

IBM’s  fourth-quarter  net  in¬ 
come  dropped  13%  year-to- 
year  to  $2.3  billion,  while  rev¬ 
enue  dipped  11%  to  $22.8  bil¬ 
lion.  The  company’s  hardware 
and  services  businesses  were 
both  down  in  the  quarter,  but 
Gerstner  blamed  the  decline  in 
total  revenue  primarily  on  soft 
sales  of  PCs  and  the  compo¬ 
nents  that  IBM  sells  to  other 
vendors. 

In  the  past  few  years,  IBM 
has  become  more  of  a  competi¬ 
tive  force  in  several  key  mar¬ 
kets  where  it  previously  lagged, 
such  as  Unix  servers,  storage 
and  nonmainframe  databases. 
The  company  has  also  signifi¬ 
cantly  built  up  its  services  and 
software  businesses,  and  it’s 
one  of  the  leading  advocates  of 
Linux  technology  for  corpo¬ 
rate  uses. 

Palmisano  has  been  a  strong 
proponent  of  using  Linux  to 
unify  IBM’s  various  server 
lines.  Users  and  analysts  point¬ 
ed  to  the  support  for  Linux 
as  a  factor  in  the  uptick  in 
mainframe  sales  last  year,  the 
first  since  1989. 

“Linux  opened  up  a  whole 
new  market  for  the  mainframe,” 
said  Dave  Ennen,  technical  sup¬ 
port  manager  at  Winnebago  In¬ 
dustries  Inc.  in  Forest  City, 
Iowa.  “For  any  application  that 
comes  down  the  pipe,  we’ll 
investigate  if  we  can  run  it  on 
[our]  mainframe.  That’s  our 
first  option.” 


The  CEO 
changeover 
will  take 
place  on 
Gerstner’s 
60th  birth¬ 
day.  That’s 
also  the  day 
his  contract 


OUTGOING  IBM  with  IBM 
CEO  Louis  Gerstner  expires. 

Palmisano,  50,  joined  IBM  as 
a  salesman  in  1973.  t 


What  should 
Palmisano's  top 
priorities  be?  How 
would  you  rate 


Gerstner's  tenure  at  IBM?  Visit  our  online 
discussion  forum. 


www.computerworld.com/q?a1550 
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HP/Compaq  Deal  Gets 
European  OK . . . 

Hewlett-Packard  Co.’s  planned  ac¬ 
quisition  of  Compaq  Computer  Corp. 
cleared  a  big  hurdle  as  the  Euro¬ 
pean  Commission  gave  its  approval 
to  the  deal  following  an  antitrust- 
related  review.  The  commission  said 
the  combined  company  would  “not 
be  in  a  position  to  increase  prices” 
because  of  the  competition  that 
exists  in  the  IT  industry. 

...While  HP  Says 
More  Cuts  Are  Likely 

HP  said  in  a  filing  with  the  Securi¬ 
ties  and  Exchange  Commission  that 
it  will  likely  make  more  cutbacks, 
whether  or  not  the  Compaq  acquisi¬ 
tion  goes  through.  The  merged  com¬ 
pany  would  eliminate  about  15,000 
jobs  for  a  10%  workforce  cut,  HP 
said.  But  it  added  that  reductions 
“would  also  be  expected  if  the  pro¬ 
posed  merger  is  not  completed.” 


Server  Shipments  Up 
Slightly  During  2001 

Server  vendors  managed  only  a 
1.8%  increase  in  worldwide  unit 
shipments  last  year  compared  with 
2000  levels,  the  lowest  growth  rate 
since  1996,  according  to  prelimi¬ 
nary  numbers  released  by  Gartner 
Inc.’s  San  Jose-based  Dataquest 
unit.  In  the  U.S.,  shipments  dropped 
9.5%,  from  1.9  million  systems  dur¬ 
ing  2000  to  1.7  million  last  year. 


Short  Takes 

Telecommunications  carrier  GLOB¬ 
AL  CROSSING  HOLDINGS  LTD.  filed 
for  bankruptcy  protection  in  New 
York  and  Bermuda,  where  it’s 
based,  and  announced  plans  to  sell 
ownership  to  new  investors. . . . 
Peer-to-peer  software  vendor 
GROOVE  NETWORKS  INC.  in  Bever¬ 
ly.  Mass.,  named  Chuck  Teubner, 
formerly  chief  operating  officer  at 
U3-  tTERNETWORKING  INC.  in  An- 
napoiis,  Md.,  to  a  similar  position. 
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PATRICIA  KEEFE 


Quantum  I  £ap 


ILL  GATES  HAS  SEEN  the  light  and  heard 
the  alarms.  As  of  his  Jan.  15  state-of-the- 
union  memo  to  employees,  security,  in 
the  guise  of  “trustworthiness,”  has  finally 
zoomed  to  the  top  of  Microsoft’s  priori¬ 
ties.  And  Computerworld  confirmed  last  week  that 
the  company  has  named  Scott  Charney,  the  former 
top  cybercop  for  the  Department  of  Justice,  as  its 
security  czar. 

This  about-face  is  mas¬ 
sively  overdue  at  a  com¬ 


pany  whose  products  are 
the  laughingstock  of  the 
security  community,  con¬ 
sidered  too  easy  a  target 
by  experienced  hackers 
and  cause  for  much  con¬ 
cern  among  uneasy  cor¬ 
porations  worried  about 
their  data  assets. 

Data  security  managers 
are  constantly  confronted 
with  Microsoft  products 
that  have  built-in  security  screw-ups. 
Vulnerabilities  have  been  found  in 
XP,  UPnP,  Internet  Explorer,  Out¬ 
look,  Internet  Information  Server, 
Hotmail,  Passport  and,  of  course, 
every  other  version  of  Windows. 
Microsoft’s  TechNet  site  alone  lists 
60  security  bulletins;  since  mid-Oc¬ 
tober,  four  out  of  nine  have  been 
tagged  “critical.” 

Both  Gartner  Inc.  and  the  FBI’s 
National  Infrastructure  Protection 
Center  have  publicly  warned  users 
away  from  specific  Microsoft  prod¬ 
ucts  or  features.  And  now  a  coalition 
of  consumer  and  privacy  groups  is 
asking  the  Federal  Trade  Commis¬ 
sion  to  step  in. 

Yet  Gates  thinks  Microsoft  can 
“lead  the  industry  to  a  whole  new 
level  of  trustworthiness  in  comput¬ 
ing.”  In  our  lifetime?  Seriously, 
reaching  that  lofty  goal  will  require  a 
quantum  leap  in  the  security  of  Mi¬ 
crosoft’s  products,  in  its  ability  to 
work  with  competitors  and  in  re¬ 
gaining  the  trust  of  now-angry  users. 
That  won’t  happen  overnight. 

For  one  thing,  Alan  Paller,  director 


Patricia  keefe  is  editorial 
director  at  Computer- 
world.  You  can  contact 
her  at  patricia_keefe@ 
computerworld.com. 


of  research  at  the  SANS 
Institute,  said  Microsoft 
told  him  that  its  new  de¬ 
votion  to  security  testing 
and  training  will  primari¬ 
ly  benefit  its  new  prod¬ 
ucts.  Although  that  bodes 
well  for  the  future,  it’s  of 
no  help  to  the  tens  of  mil¬ 
lions  of  Microsoft  users 
who  are  now  running  the 
company’s  vulnerable  ap¬ 
plications  on  equally  at- 
risk  operating  systems. 

This  is  why  it  matters  when  a  com¬ 
pany  assumes  a  monopoly  position 
in  a  market:  It  doesn’t  have  to  care 
about  current  users.  Who  ya  gonna 
call  for  replacement  desktop  applica¬ 
tions?  For  most  commercial  and  gov¬ 
ernment  accounts,  there  are  no  ac¬ 
ceptable  alternatives  to  Microsoft. 


Paller  and  many  users  in  various 
forums  all  insist  that  Microsoft’s  cus¬ 
tomers  are  disillusioned,  angry  and 
starting  to  act.  Paller  recounts  how 
the  deputy  CIO  of  the  Air  Force 
stood  up  at  a  recent  SANS  seminar 
and  told  200  people  that  Microsoft 
must  make  a  quantum  change  in  the 
way  it  delivers  software  to  the  gov¬ 
ernment.  He’s  quoted  as  saying,  “It’s 
costing  us  more  to  clean  up  after  the 
messes  than  to  buy  the  software  in 
the  first  place,  and  we’re  willing  to 
pay  for  it  [to  be  done  right].” 

Charney  needs  to  calm  Microsoft’s 
frustrated  users,  who  don’t  want  to 
hear  from  him  about  what  happens 
after  a  security  breach.  They  want  to 
know  what  Microsoft  is  doing  to  pre¬ 
vent  security  problems.  And  they 
want  help  with  the  problems  they’ve 
got  now. 

However  Microsoft  puts  Gates’ 
directive  into  action,  it  has  to  ad¬ 
dress  existing  weaknesses.  A  good 
place  for  the  company  to  start  is  “Re¬ 
sults,  Not  Resolutions:  A  Guide  to 
Judging  Microsoft’s  Security  Prog¬ 
ress”  ( www.securityfocus.com/news/ 
315),  by  security  experts  Bruce 
Schneier  and  Adam  Shostack.  It’s 
brimming  with  suggestions  on  where 
Microsoft  can  begin  to  secure  its 
products  and  gain  our  trust.  > 
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PIMM  FOX 

Little  Hope  in 
Web  Services 

A  FUNNY  THING  hap¬ 
pened  on  the  way  to 
Web  services:  Some¬ 
one  forgot  to  mention  that  the 
XML  protocols  for  SOAP  and 

Web  Services  Description  Language 
(WSDL)  haven’t  been  agreed  to  yet. 

In  fact,  the  standards  body  for  Web 
services  released  a  draft  for  a  Web  ser¬ 
vices  container 
for  J2EE  only  last 
month.  And 
while  there  are 
positive  things 
about  SOAP  and 
WSDL  (such  as 
message-passing 
between  XML 
schemas),  there’s 
a  great  deal  to  be 
worked  out  re¬ 
garding  XML 
protocols  for 
user  interfaces  and  testing  of  Web  ser¬ 
vices  with  back-end  applications. 

For  example,  in  a  Web  services  envi¬ 
ronment,  an  HTML  Web  page  that  in¬ 
cludes  a  Java  Server  Page,  such  as  a  live 
stock  ticker,  must  connect  to  a  back¬ 
end  application  to  retrieve  data.  If  you 
wanted  to  test  this  connection  before 
deployment,  you  would  need  virtual¬ 
ization  technology  from  Interwoven 
Inc.  But  it’s  not  a  standard,  either. 

So  far,  Web  services  lack  a  single 
comprehensive  way  to  manage  their 
development,  testing,  deployment  and 
upgrading. 

IBM  has  chosen  to  tackle  the  issue 
piecemeal,  defining  standards  on  the 
business  stack  as  needed,  using  Web¬ 
Sphere  and  Web  application  manage¬ 
ment  tools. 

Both  IBM’s  and  Interwoven’s  ap¬ 
proaches  leave  a  large  hole  to  be  filled 
for  Web  services  management. 

If  you  think  portals  are  the  solution, 
think  again.  Can  you  imagine  exposing 
back-end  applications  to  people  enter¬ 
ing  data  from  a  portal?  Never  mind  se¬ 
curity  issues;  you  still  need  to  organize 
and  synchronize  information  between 
two  different  applications.  And  you  can 
bet  those  applications  are  built  with 
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different  vendor  technology,  bringing 
additional  integration  headaches. 

Testing  isn’t  just  a  technology  prob¬ 
lem;  it’s  also  an  issue  of  reliability.  A 
large  enterprise  can’t  jump  into  Web 
services  without  some  assurance  the 
back-end  connections  via  XML  and 
SOAP  actually  work. 

Finally,  few  companies  have  struc¬ 
tured  their  information  repositories 
with  Web  services  in  mind.  Document 
management,  Web  content  manage¬ 
ment,  digital  asset  management,  media 
asset  management  and  Web  applica¬ 
tion  management,  as  well  as  file  sys¬ 
tems  for  unstructured  content,  are  all 
potential  bottlenecks  to  rolling  out 
Web  services.  Even  if  you  lick  the  con¬ 
tent  management  problem,  you  still 
face  testing  source  databases  for  the 
transformation  of  tables  to  Web  pages. 

Some  IT  managers  think  Web  ser¬ 
vices  are  a  reality  —  they  aren’t.  Some 
believe  Web  services  mean  interoper¬ 
ability  —  they  don’t.  (.Net  and  J2EE  are 
still  slugging  it  out  in  the  hearts  and 
minds  of  developers.)  Others  see  Web 
services  as  APIs  —  they  aren’t.  Let’s 
face  it,  you  won’t  run  subroutines, 
functions  or  class  calls  over  the  Net. 
And  you’re  unlikely  to  be  starting  any 
Web  services  projects  before  these 
gaps  in  Web  services  are  closed.  > 

THORNTON  MAY 

Is  It  Time 
To  Upgrade 
Vendor  CEOs? 

UDY  GIULIANI  has  it. 
Lincoln,  FDR  and 
Churchill  had  it.  And 
Jeff  Immelt,  Jack  Welch’s  suc¬ 
cessor  at  General  Electric,  has 
it:  the  ability  to  lead  in  difficult  times. 

The  technology  world  is  facing  diffi¬ 
cult  times.  Many  in-the-trenches  IT 
leaders  are  standing  at  a  Dunkirk-like 
decision  point:  Do  they  retreat  strate¬ 
gically,  stand  their  ground  in  the  face 
of  a  certain  rout,  or  just  surrender  to 
the  forces  of  darkness  and  despair? 
They  wonder  if  vendor  CEOs  will 
come  to  their  rescue  by  providing  in¬ 
centives  to  buy  their  products  in  a 
down  economy.  Observers  of  the 
broader  tech  scene  wonder  if  the  cur¬ 
rent  slate  of  vendor  CEOs  is  up  to  the 
challenge  of  leading  in  this  economic 
climate. 

So,  is  it  time  for  a  vendor  CEO  up¬ 


grade?  Has  the  current  cast 
of  technology  CEOs  out¬ 
lived  its  usefulness?  Are 
these  CEOs  so  grounded  in 
times-are-good  mind-sets 
that  they  can’t  be  effective 
during  an  economic  down¬ 
turn? 

In  the  “Managing  the  In¬ 
formation  Resource”  pro¬ 
gram  at  UCLA,  in  which 
most  of  the  students  are 
CIOs  or  their  direct  reports, 
professors  ask  students  to 
describe  the  state  of  today’s 
technology  leadership.  One 
European  student  responded,  only  par¬ 
tially  tongue  in  cheek,  that  true  Ameri¬ 
can  vendor  CEO  leaders  are  like 
snakes  in  Ireland:  There  are  none. 

Another  set  of  students  asked,  Should 
the  likenesses  of  Carly  Fiorina,  Bill 
Gates,  Scott  McNealy,  Lou  Gerstner  and 
Larry  Ellison  be  chiseled  into  a  technol¬ 
ogy  Mount  Rushmore?  Or  should  they 
be  voted  off  the  technology  leadership 
island?  (Answer:  Only  Gates  goes.) 

The  current  cast  of  technology 


CEOs  enjoyed  a  great  ride. 
They  were  very  successful 
during  the  boom  times  of 
the  PC/client-server/net¬ 
work  computing/Internet 
build-out.  It  remains  to  be 
seen  how  they  will  do  in 
the  you-have-to-do-more- 
than-ship-and-shout  scene 
that  describes  today’s  IT 
marketplace. 

The  real  question  is, 
What  should  we  ask  of  ven¬ 
dor  CEOs  in  these  difficult 
times?  Is  it  enough  for  one 
of  them  to  hunker  down 
and  try  to  save  the  ship  he’s  steering? 
Or  should  we  expect  more  in  the  way 
of  technology  statesmanship,  looking 
beyond  a  company’s  interests  to  the 
overall  good  of  technology?  We  have 
entered  a  new  digital  world,  one  that 
needs  new  frameworks  and  heroes. 
Who  will  these  leaders  be? 

How  should  we  evaluate  technology 
CEOs?  We  need  to  jettison  dysfunc¬ 
tional  and  misleading  indicators  such 
as  stock-price  multiples  and  quarterly 


sales  figures.  What  should  the  score- 
card  for  the  next  generation  of  tech¬ 
nology  CEOs  look  like? 

What  are  good  metrics  of  leadership 
today?  One  possible  evaluation  point  is 
sincerity  and  motives.  Do  CEOs  care 
about  their  customers,  or  do  they  just 
want  their  money? 

Instead  listening  to  CEOs’  publicist- 
sculpted  sound  bites,  we  need  to  look 
beyond  the  words  that  come  from  their 
lips.  Seek  the  meaning  in  the  whole 
context  in  which  a  message  occurs.  To 
figure  out  what’s  really  being  said,  we 
must  ask.  Who  is  saying  what  to  whom, 
under  what  conditions  and  circum¬ 
stances,  and  with  what  intent?  Gates, 
for  example,  showed  commendable 
leadership  recently  when  he  announced 
that  Microsoft  would  undertake  the 
quest  to  write  more  secure  code. 

In  1953,  Charles  Wilson,  then  presi¬ 
dent  of  GM,  told  a  congressional  hear¬ 
ing  that  “what  was  good  for  our  coun¬ 
try  was  good  for  General  Motors.”  Giv¬ 
en  the  dependence  of  our  economy  on 
IT,  is  the  current  group  of  vendor 
CEOs  good  enough  for  the  country?  I 
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Taking  Wrong  Approach 

INTERESTING  —  the  IT 
industry  is  making  the 
same  mistake  at  the  na¬ 
tional  level  that  we  often 
make  at  the  company  level 
[“CEOs:  Broadband  Is  Na¬ 
tional  Priority,”  News,  Jan. 
28].  Instead  of  tech  leaders 
pushing  broadband  to  Con¬ 
gress,  they  should  convince 
manufacturing,  retail,  bank¬ 
ing  and  other  leaders  of  its 
necessity,  then  enlist  their 
aid  in  lobbying. 

Barry  Blauer 
Technical  manager 
TEKsystems 
Southfield,  Mich. 

Another  Buzzword 

I  wonder  how  many 
times  in  the  past  10  years 
this  story  has  been  pub¬ 
lished  with  only  the  name 
(buzzword)  for  the  technol¬ 
ogy  and  the  names  of  the 
suppliers  and  users  changed 
[“Web  Services  Projects 
Pose  Challenges  for  IT  Man¬ 
agers,”  News,  Jan.  28]?  I 
guess  I’m  getting  too  jaded, 
but  my  question  is,  Why 


would  anyone  with  any  ex¬ 
perience  in  IT  be  surprised 
at  the  situation  described? 

Charlie  Whitfield 

Manager,  IS 

Sault  Ste.  Marie,  Ontario 

You  Call  This  Progress? 

Pimm  fox  describes  the 
modern  look,  all  right 
[“The  Modern  Profile 
of  the  IT  Pro,”  News  Opin¬ 
ion,  Jan.  21].  But  what  a 
waste.  Older,  seasoned  vet¬ 
erans  of  the  IT  industry  who 
understand  the  difference 
between  what  is  new  and 
what  simply  has  a  new  name 
don’t  stand  a  chance.  Think 
of  that  the  next  time  some¬ 
thing  doesn’t  work  correctly. 
Deatra  Davenport 
Independent  consultant 
MicroComp 
Chicago 

Old-fashioned  Security 

Low-cost  irish  airline 
Ryanair  does  positive 
passenger  bag  match¬ 
ing  with  nothing  more  com¬ 
plex  than  pencil  and  paper 
[“Wireless  LANs:  Trouble  in 


the  Air,”  Page  One,  Jan.  14].  It 
can  do  this  because  it  won’t 
accept  or  pass  on  baggage 
from  other  carriers  and 
doesn’t  facilitate  transfers 
between  flights.  This  dem¬ 
onstrates  that  technology  is¬ 
n’t  always  the  answer,  even 
though  it  does  keep  us  com¬ 
puter  professionals  in  a  job. 
Miles  Thomas 
Harpenden,  England 
milest@orange.net 

IF  my  bag  somehow  goes 
where  I  don’t,  will  the 
airlines  be  able  to  put  it 
on  an  airplane  to  return  it, 
or  will  the  luggage  be  forev¬ 
er  grounded?  Perhaps  the 
airlines  will  offer  free  tickets 
to  owners  of  misdirected 
luggage  to  join  their  bags.  I’d 
be  hoping  my  bag  went  to 
Tahiti  by  mistake. 

John  Taylor 
Vallejo,  Calif. 

The  Root  of  the  Problem 

I  agree  THAT  Windows 
9x  and  ME  don’t  have 
system  protection  [“Pe- 
treley’s  Law  of  Sysadmins,” 
Knowledge  Center,  Jan.  21]. 


They  were  designed  that 
way.  If  you  want  system  pro¬ 
tection,  don’t  use  them. 
Windows  NT,  2000  and  XP 
all  have  system  protection.  I 
haven’t  seen  the  latest  fig¬ 
ures,  but  that’s  a  large  per¬ 
centage  of  Windows  PCs. 

It’s  true  that  users  may  log 
in  as  administrator,  but 
that’s  also  true  of  all  Unix 
systems,  and  I  suspect  that 
more  Linux  users  log  in  as 
root  than  on  all  other  Unix 
systems  combined. 

Phil  Daley 
Hillsboro,  N.H. 
p_daley@conknef.com 

C0MPUTERW0RLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor.  Computerworld, 
P0  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 

Fax:  (508)  879-4843.  Internet: 
ietters@computerworld.com.  Include 
an  address  and  phone  number  for 
immediate  verification. 

For  more  letters 
on  these  and  other 

O  topics,  visit  our 
Web  site: 

www.computerwortd.com/q7q5000 


thornton  may  is  a  se¬ 
nior  member  of  Toffler 
Associates  Inc.  in 
Manchester,  Mass.,  an 
executive  advisory 
firm.  Contact  him  at 
tmay@toffler.com. 
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•  The  original,  largest  and  proven  forum  for  IT  users  involved  in  storage  networking, 
enterprise  infrastructure  and  data  management 
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second  to  none 
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Interoperability: 
The  2002  Challenge 

Addressing  Interoperability  in 
Heterogeneous  Environments 


Interoperability  has  been  a  hot  topic  of  discussion 
and  debate  since  the  initial  emergence  of  stor¬ 
age-area  networks  (SANs).  Is  it  still  an  issue? 
Should  interoperability  concerns  be  perceived  as 
a  key  barrier  to  successful  SAN  deployment? 
Current  analysis  says  definitely  no...  with  a  little  bit  of  yes. 


The  early  days  of  SANs  were 
remarkably  like  the  early  days  of 
LANs:  The  market  was  flooded  by  a 
plethora  of  products  and  vendors, 
hardware  and  software,  hubs  and 
switches,  with  a 
mind-boggling 
array  of  different 
features  and  func¬ 
tions.  And  like 
LANs,  early  SANs 
had  tremendous 
interoperability 
issues.  With  products  coming  to  mar¬ 
ket  before  standards,  and  hundreds  of 
vendors  jumping  on  the  SANdwagon, 
it  was  a  daunting  task  for  users  to  dig 
through  the  hype,  understand  what 
they  needed,  and  find  products  that 


actually  talked  to  each  other. 

The  result  was  that  early  SAN 
adopters  put  in  a  great  deal  of  time 
and  effort  to  get  their  SANs  working. 
Interoperability  was  perhaps  the 
number  one  issue  for  these  early 
users.  Only  the  brave  dared  to  tackle 
the  task,  with  lots  of  vendor  involve¬ 
ment  and  frustration.  The  sentiment 
of  the  early  adopters  was  that  build¬ 
ing  your  own  SAN  and  trying  to  piece 
things  together  from  various  vendors 
was  extremely  difficult.  Their  advice: 
find  a  primary  vendor  (probably  your 
storage  vendor,  your  server  vendor,  or 
a  trustworthy  integrator)  and  stick 
with  a  homogeneous  proven  configu¬ 
ration. 

These  early  struggles  took  a  toll.  In 


fact,  in  a  recent  survey  of  users  at 
Storage  Networking  World,  79%  of 
audience  members  reported  that 
incompatibilities  between  vendors 
and  their  products  have  had  a  nega¬ 
tive  impact  on  their  businesses  (see 
Figure  1). 

Progress  on  standards 

In  the  past  several  years,  standards 
began  to  emerge,  vendors  began  to 
work  together,  and  we  began  to  see 
products  with  an  initial  level  of  inter¬ 
operability.  Numerous  organizations 
undertook  significant  roles:  the 
Storage  Networking  Industry 
Association  (SNIA);  the  Fibre 
Channel  Industry  Association 
(FCIA);  the  Fibre  Alliance;  the 
National  Committee  for  Information 


Early  adopters  found  that 
building  your  own  SAN  with 
pieces  from  various  vendors 
was  extremely  difficult. 
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THE  DLTtape  LOGO. 


For  more  than  a  decade,  DLTtape  "  technology 
has  been  known  for  its  unparalleled  reliability 
in  data  protection  and  retrieval.  In  fact, 
DLTtape  cartridges  must  pass  a  stringent 
process  to  become 
fully  qualified  and 
display  the 
DLTtape  logo. 

That’s  why  you’ll 
always  want  to  look  for 
the  DLTtape  logo  when  buying 
DLTtape  products.  It  ensures  that  your 
company’s  mission-critical  data  is  trusted 
to  quality  media  that  has  met  the  highest 
standards  for  reliability,  compatibility 
and  performance.  You’re  also  guaranteed 


to  be  getting  the  de  facto  standard  for  data 
backup  and  retrieval.  Products  that  do  not 
have  the  DLTtape  logo  have  not  met  these 
stringent  qualification  standards. 

So,  be 
sure  to  use 
cartridges 
that  carry  the 
DLTtape  logo. 
It  gives  you 
the  confidence  of  knowing  you’ve  purchased 
the  ultra-reliable  backup  solution  that’s 
chosen  5:1  by  IS/IT  managers.  To  find  out 
how  the  DLTtape  logo  has  become  the 
ultimate  symbol  of  quality  and  reliability, 
go  to  www.dlttape.com/qualified. 
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The  issue  of  standards 
tends  to  be  one  of  the 
banes  of  the  technology 
industry.  Vendors  constantly 
fight  one  another  for  their 
own  vested  interests,  and 
the  inevitable  result  for 
users  is  frustratingly 
slow  progress. 


Technology  Standards  (NCITS,  for¬ 
merly  X3)  technical  committees  (T10 
for  SCSI,  and  Til  for  Fibre  Channel 
working  toward  ANSI  standards); 
and  the  Institute  of  Electrical  and 
Electronics  Engineers  (IEEE),  among 
others. 

The  issue  of  standards  tends  to  be 
one  of  the  banes  of  our  industry;  ven¬ 
dors  fight  for  their  own  vested  inter¬ 
ests,  and  the  result  is  slow  progress.  A 
quotation  on  the  T10  Technical 
Committee’s  Web  site  says,  “If  com¬ 
puters  get  too  powerful,  we  can 
organize  them  into  a  committee;  that 
wall  do  them  in.”  In  the  case  of  SANs, 
however,  much  standards-related 
progress  has  been  made,  and  the  cur¬ 
rent  level  of  SAN  interoperability 
owes  much  of  its  progress  to  this 
work. 

Labs  and  certifications 

Another  key  reason  for  interoper¬ 
ability  improvement  is  the  amount  of 
time,  money,  and  effort  that  has  been 


put  into  a  variety  of  interoperability 
laboratories.  With  over  200  vendors 
in  the  networked  storage  space  and 
the  huge  number  of  product  combi¬ 
nations,  vendors  face  an  almost 
impossible  testing  challenge.  Many 
major  players  have  spent  millions  of 
dollars  building  test  labs  with  prod¬ 
ucts  representing  at  least  the  most 
popular  options  for  servers,  storage 
arrays,  tape  libraries,  hubs,  switches, 
and  bridges.  These  labs  serve  the  ven¬ 
dors  as  internal  test  facilities  for  their 
own  product  groups,  and  as  a  proof- 
of-concept  lab  for  specific  customer 
requirements. 

In  addition  to  vendor  labs,  SNIA 
(in  conjunction  with  Compaq 
Computer  Corp.)  has.  created  the 
SNIA  Technology  Center,  an  inde¬ 
pendent  interoperability  test  lab  in 
Colorado  Springs,  for  its  member 
companies  —  vendors  and  users 
alike.  Advisors  to  the  center  include 


analysts,  integrators,  and  end  users. 
The  lab  is  a  resource  for  the  SNIA 
Interoperability  Committee  and  is 
also  intended  to  provide  ongoing 
plug-fests,  workshops,  and  training. 
Industry  conferences  such  as  Storage 
Networking  World  let  users  see  the 
progress  being  made  by  visiting  the 
Interoperability  Lab  onsite  at  the 
show.  In  a  survey  at  the  Oct.  2001 
Storage  Networking  World,  78%  of 
attendees  said  the  lab  was  a  valuable 
part  of  the  overall  education  at  the 
show. 

The  University  of  New  Hampshire 
offers  another  vendor-neutral  inter¬ 
operability  resource  through  its 
Interoperability  Lab,  known  as  IOL. 
The  mission  of  the  IOL  is  twofold: 

♦  The  first  mission,  externally 
focused,  is  to  provide  testing  services 
for  vendors  to  verify  the  interoper¬ 
ability  and/or  conformance  of  their 
products. 


Figure  1: 

Have  incompatibilities  between  competing  vendors'  products 
had  a  negative  impact  on  your  business? 

Yes 

No 

0  10  20  30  40  50  60  70  80 

Source:  A  survey  of  attendees  at  the  Oct.  2001  Storage  Networking  World  conference 
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♦  The  second  mission  is  to  pro- 
vide  educational  and  employment 
opportunities  for  qualified  University 
of  New  Hampshire  students. 

The  IOL  includes  focused  interest 
groups,  called  consortiums,  in  Fibre 
Channel,  Gigabit  Ethernet,  iSCSI,  IP 
v6,  and  several  other  communications 
protocols. 

Independent  certifications  on 
compliance  and  interoperability  have 
also  helped  users  understand  what 
works  with  what.  The  Fibre  Channel 
Industry  Alliance  (FCIA)  SANmark 
certification  was  the  first  stamp  of 
approval  offered,  certifying  a  level  of 
Fibre  Channel  compliance  on  indi¬ 
vidual  products. 

New  forums 

More  recently,  SNIA  introduced  a 
new  forum  called  the  Supported 
Solutions  Forum  (SSF)  with  two  key 
goals.  First,  the  SSF  aims  to  build  a 
registry  of  tested  multivendor  solu¬ 
tions  that  meet  a  defined  set  of  crite¬ 
ria  (such  as  including  a  minimum 
number  of  competitive  vendor  prod¬ 
ucts,  as  well  as  functional  and  test  cri¬ 
teria). 

The  initial  SSF  announcement 
included  two  approved  solutions 
with  six  vendors;  however,  these 
solutions  were  approved  with  fairly 
severe  restrictions  (for  example,  zon¬ 
ing  to  maintain  separation  between 
competitive  boxes).  Some  critics 
have  asked  whether  this  qualifies  as 
real  interoperability,  but  at  the  very 
least,  it’s  certainly  a  step  in  the  right 
direction. 

Membership  in  SSF  is  up  to  36 
vendors,  and  new  supported  solu¬ 
tions  are  purportedly  in  the  works. 


Users  should  hope  the  forum  will 
now  address  tougher  issues,  includ¬ 
ing  bigger  and  more  complex  config¬ 
urations,  additional  vendors,  soft¬ 
ware,  tape,  switch  interoperability, 
and  so  on. 

The  second  goal  of  the  SSF  is  to 
address  what  is  perhaps  the  bigger 


One  key  reason  for 
interoperability  improvement 
is  the  time,  money,  and 
effort  that's  been  put  into 
interoperability  labs. 


issue  today  in  interoperability:  coop¬ 
eration  among  vendors  in  supporting 
multi-vendor  storage  networks.  As  an 
independent  organization,  SSF  aims 
to  help  vendors  work  together  to  help 
users  with  their  ongoing  support 
issues,  by  assisting  with  cooperative 
support  agreements,  and  by  striving 
to  establish  a  cooperative  support 


community. 

Where  does  all  this  leave  us  today? 
On  the  standards  front,  some  say 
there  are  now  too  many;  others  argue 
that  there  is  still  a  broad  lack  of  agree¬ 
ment.  Work  continues,  and  while  ini¬ 
tial  standards  are  now  in  place,  there 
is  still  work  being  done  to  resolve 
more  advanced  interoperability 
issues  (for  example,  FC-SW  is 
approved  and  defines  the  standards 
for  Fibre  Channel  Switches,  while 
FC-SW2  is  now  in  the  approval 
process  for  defining  the  standards  for 
interoperability  between  Fibre 
Switches). 

Taking  root 

Of  course,  once  any  standard  is 
finalized,  it  takes  time  for  it  to  be 
implemented.  In  terms  of  available 
products,  interoperability  testing  has 
made  great  strides,  and  most  lower- 
layer  interoperability  issues  have 
been  addressed  (notable  exceptions 
include  ongoing  conflicts  and  incom¬ 
patibilities  in  the  HBA  arena). 

There’s  been  enough  progress  to 
date  so  that  the  general  issue  of  inter¬ 
operability  and  lack  of  standards  has 
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Figure  2: 

Should  the  industry  provide  vendor-independent 
certification  in  storage  management  technologies? 


Source:  A  survey  of  attendees  at  the  Oct.  2001  Storage  Networking  World  conference 


dropped  significantly  from  its  place 
near  the  top  of  the  list  of  SAN  imple 
mentation  barriers,  according  to  most 
users.  (Cost  and  a  lack  of  skilled 
workers  now  top  the  list  of  impedi¬ 
ments,  many  users  agree.) 

Moving  up  the  stack 

With  interoperability  issues  at  the 
lower  layers  now  being  largely 
addressed,  the  key  challenge  in  true 
interoperability  is  in  moving  up  the 
stack  to  address  issues  such  as  stor¬ 
age  management.  Again,  standards 
work  comes  into  play  here.  At  the 
IETF,  efforts  are  under  way  in  SNMP 
MIB  compliance.  Also,  work  on  the 
Common  Information  Model  (CIM) 
is  being  done  at  the  Distributed 
Management  Task  Force  (DMTF). 
Because  one  of  the  key  drivers  for 
SANs  is  improved  storage  manage¬ 
ment,  interoperability  at  the  manage¬ 
ment  level  is  critical.  Underscoring 


this  need,  81%  of  Storage  Networking 
World  attendees  said  they  want  the 
industry  to  provide  vendor-inde¬ 
pendent  certification  in  storage  man¬ 
agement  technologies  (see  Figure  2). 

Another  example  of  moving  up  the 
stack  comes  in  the  area  of  virtualiza¬ 
tion.  Virtualization  offers  great  bene¬ 
fits  today  within  individual  areas,  but 
until  SANs  offer  complete  virtualiza¬ 
tion  regardless  of  product,  vendor, 
and  platform,  the  full  promise  is  not 
fulfilled.  Moving  up  the  stack  to  these 
higher  levels  of  interoperability 
involves  more  complexity,  but  will 
truly  deliver  on  the  promise  of  net¬ 
worked  storage. 

Emerging  technologies 

Thus  far,  the  SAN  limelight  and 
the  interoperability  discussion  have 
focused  mostly  on  Fibre  Channel.  In 
fact,  some  attribute  the  continuing 
negative  focus  on  interoperability  to 


Fibre  Channel  critics  who  seek  to  dis¬ 
credit  Fibre  Channel  SANs. 

If,  as  many  believe,  lower  layer 
interoperability  is  no  longer  an  issue 
with  Fibre  Channel,  one  interesting 
question  is  what  will  happen  in  the 
future  with  the  emerging  technolo¬ 
gies  of  iSCSI,  iFCP,  FCIP,  Infiniband, 
DAFS,  TCP  offload,  the  merging  of 
SAN  and  NAS,  and  other  technolo¬ 
gies  as  they  evolve.  For  example, 
while  some  argue  that  IP  storage  has 
already  conquered  interoperability 
since  it  uses  IP,  there  are  still  many 
challenges  to  address  with  IP  storage, 
as  well  as  its  coexistence  with  Fibre 
Channel. 

As  with  most  changing  technolo¬ 
gies,  the  real  world  will  most  likely  be 
a  hybrid  of  all  these  options,  involving 
interoperability  issues  within  tech¬ 
nologies  as  well  as  across  them.  And 
so  the  saga  continues... 
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INTRODUCING  A  WHOLE  NEW  WAY 
TO  LOOK  AT  STORAGE  MANAGEMENT 


BrightStor™  Storage  Management  Solutions 

For  years,  storage  management  has  been  an  ever-increasing  cost,  not  a  source  of  potential 
opportunity.  But  that's  all  about  to  change.  Because  we've  created  BrightStor,  the  most 
comprehensive  suite  of  end-to-end  storage  management  solutions  on  the  market.  BrightStor 
lets  you  leverage  your  resources  and  data  across  your  entire  enterprise,  regardless  of 
platform  or  protocol.  In  fact,  BrightStor  is  the  only  suite  of  solutions  that  supports  all 
three  industry  models  — DAS,  NAS  and  SAN  — cross-platform.  Which  means  you  can  look 
at  your  eBusiness  needs  as  a  whole,  not  piece  by  piece.  So  you  can  optimize  your  resources 
across  your  entire  storage  infrastructure.  And,  most  importantly,  you  can  do  more  than  just 
store  information.  You  can  actually  use  it. 


Computer  Associates™ 


HELLO  TOMORROW  WE  ARE  COMPUTER  ASSOCIATES  THE  SOFTWARE  THAT  MANAGES  eBUSINESS" 


ca.com/storage 
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stand  everything  about  them.  Fannie 
Mae  is  not  bleeding-edge;  we’re  risk- 
averse.  We’re  more  into  using  proven 
technologies,  so  we  wouldn’t  adopt 
anything  like  virtualization  until  we 
saw  that  it  was  mature. 

There  seems  to  be  a  dichotomy 
between  what  we  hear  from  ven¬ 
dors  and  what  users  are  really 
doing.  Vendors  talk  about  the  abili¬ 
ty  to  make  heterogeneous  net¬ 
works,  while  a  lot  of  users  say 
they’re  just  trying  to  keep  this 
thing  uniform  and  homogeneous. 
Where  is  the  reality  between  those 
extremes? 

COBB:  I  think  it’s  in  the  middle. 
As  I  said,  we  have  a  SAN  for  the 
backup  capability.  And  in  that  envi¬ 
ronment,  we  are  heterogeneous,  mix¬ 
ing  all  kinds  of  systems.  On  the  disk 
storage  side,  we  develop  our  disk 
SANs  by  business  area.  In  those  cases, 
we  may  be  heterogeneous  on  the 
server  side,  but  we’re  not  mixing  dif¬ 
ferent  vendors’  storage  yet.  So  1  think 
both  things  are  happening. 

Truly,  we  are  moving  toward 
being  fully  heterogeneous  on  the 
storage  side.  A  lot  of  the  [vendor] 
companies  we  deal  with  are  getting 
the  message.  As  a  result,  wc  periodi¬ 
cally  hear  about  vendors  teaming  up 
to  work  on  open  standards  issues. 

When  you  talk  to  your  peers, 
other  users,  what  are  their  com¬ 
plaints  about  interoperability? 

COBB:  The  point  that  you  raised. 
There’s  a  difference  between  users 
who've  done  it  and  users  who  haven’t. 
When  we  started  out,  we  went 
around  and  we  talked  to  everybody. 
We  went  to  all  the  vendors,  we  went 
to  their  interoperability  labs,  and  we 


went  to  their  engineering  headquar¬ 
ters  and  talked  to  their  designers.  We 
were  told  that  if  we  were  going  to 
build  it,  we  should  definitely  be 
homogeneous. 

There  is  still  a  lot  of  push  like  that 
from  the  sales  side.  In  our  environ¬ 
ment,  we’re  very  large,  heteroge¬ 
neous,  and  complex.  Homogeneous 
just  doesn’t  work  for  us  because 
that’s  not  how  we  are,  so  we  have  to 
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Truly,  we  are  moving 
toward  being  fully  hetero¬ 
geneous  on  the  storage 
side.  A  lot  of  the  [vendor] 
companies  we  deal  with 
are  getting  the  message. 
We  periodically  hear 
about  vendors  teaming 
up  to  work  on  open 
standards  issues. 


: 


wade  through  all  that  hype  and  get 
down  to  really  what  it  can  do. 

Customers  who  haven’t  imple¬ 
mented  yet  may  be  shying  away  from 
some  of  the  rhetoric  that  they  hear. 
But  other  customers  who  have  done 
implementations  agree  that,  as  has 
been  the  case  with  Fannie  Mae,  you 
have  to  build  test  environments  every 
time  you  deploy.  We  have  a  test  envi¬ 
ronment  that  we  can  test  everything 


on,  including  functionality,  through¬ 
put,  and  configurations. 

We  make  sure  we  can  change 
switch  firmware  as  we  need  to.  We 
have  the  same  kinds  of  servers  in  the 
test  environment,  including  HBA 
firmware,  and  the  same  on  the  stor¬ 
age  side.  Customers  have  to  be  will¬ 
ing  to  do  this  testing  in  a  full  environ¬ 
ment  that  mimics  production. 

How  would  you  assess  the 
progress  by  vendors  toward  inter¬ 
operability,  and  how  can  they  do 
more? 

COBB:  They  should  do  more. 
They  should  be  more  aggressive. 
Vendors  partner  up  and  make  these 
announcements  about  working 
together,  but  I’d  like  to  see  more  hard, 
cold  interoperability  certifications 
out  there.  I’d  like  to  see  multiple  stor¬ 
age  vendors  coming  out  and  certify¬ 
ing  solutions  all  together. 

Do  you  view  things  like  the 
Storage  Networking  Industry 
Association’s  Supported  Solutions 
Forum  as  a  step  in  the  right  direc¬ 
tion,  but  not  a  big  enough  step? 

COBB:  I  think  it  is  a  step  in  the 
right  direction.  We  need  that,  and  we 
need  big  customers  forcing  the  issue. 
Some  of  the  conferences  like  Storage 
Networking  World  are  helpful,  but 
sometimes  I  think  that  big  customer 
alliances  might  also  be  a  big  help. 

Users  stand  to  benefit  most 
from  standards,  but  it’s  often  hard 
to  get  them  involved.  Have  you  had 
any  involvement  in  the  standards 
development  process? 

,  COBB:  1  haven’t  been  involved  in 
I  the  development  of  standards,  but  I 
have  been  considering  it.  I  think  I 
could  make  a  difference  if  I  did.  The 
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vendors  I  work  with  have  been 
responsive  —  some  more  than  others 
—  and  so  far,  we’ve  been  able  to  get 
our  issues  resolved  at  Fannie  Mae. 
But  I  do  think  participation  on  stan¬ 
dards  boards  would  be  beneficial. 

It’s  hard  to  get  users  involved, 
because  they’re  off  taking  care  of  their 
day-to-day  activities.  But  on  the  flip 
side,  we’ve  clearly  seen  the  gains  this 
technology’  has  provided  in  terms  of 
helping  us  reduce  our  costs  and 
increase  our  efficiency.  That’s  why 
from  my  standpoint,  it’s  worth  get¬ 
ting  involved  with  some  of  these 
standards. 

It  sounds  as  though  you  believe 
substantial  interoperability  gains 
have  been  realized. 

COBB:  As  I  said,  the  basic  stuff  is 
there.  SCSI  over  Fibre  Channel,  all 
that  good  stuff  works  today,  so  I  can 
use  switches  now  and  build  SANs 
that  allow  me  to  share  storage  on  the 
back  end  across  multiple  servers. 
That  works  today,  there  is  no  doubt 
about  it.  I  think  that  switch  technol¬ 
ogy  has  matured  so  that  there’s  a  long 
mean  time  between  failure.  The  man¬ 
agement  side  is  where  there  is  a  lack 
of  standards. 

Your  storage  arrays  don’t  all  talk 
the  same  language,  so  I  don’t  have  a 
tool  that  I  can  use  to  look  at  and 
administer  heterogeneous  storage 
arrays  all  at  the  same  time.  Those 
types  of  things  are  not  there. 
Reporting  is  another  area  where  I 
don’t  have  a  tool  that  can  give  me 
reporting  across  all  environments  on, 
for  example,  utilization. 

We  seem  to  go  through  cycles. 
Twenty  years  ago,  we  went  through 
this  with  LANs,  and  with  data  and 


voice  communications  integration.  ; 
At  the  time,  it  seemed  like  we  were  j 
in  the  dark  old  days  of  computing,  j 
Now  it  seems  like  we’re  going  i 
through  that  again  as  we  strive  to  ; 
reach  some  kind  of  standardized  j 
level  of  interoperability.  It’s  almost  j 
as  though  in  some  ways,  we  haven’t  | 
moved  ahead  at  all.  j 

COBB:  Take  networks,  for  exam-  j 
pie.  And  this  came  up  in  a  lot  of  our  j 
conversations  with  server  and  stor-  j 
age  vendors.  Most  LANs  don’t  j 
include  a  mix  of  switches  and  i 


Vendors  partner  up  and 

; 
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make  these  announce¬ 

ments  about  working 

together,  but  I'd  like  to 

see  more  hard,  cold  inter¬ 

j 

operability  certifications 

out  there. 

routers.  People  who  build  LANs  get 
their  switches  and  routers  from  the 
same  vendor.  So  even  though  TCP/IP 
and  Ethernet  are  mature  standards, 
you  still  end  up  building  a  homoge¬ 
neous  network  infrastructure.  At  any 
rate,  clearly,  interoperability  is 
improving. 

How  satisfied  are  you  by  the 
role  being  played  by  SNIA,  and 
how  much  bigger  can  that  role  be? 

COBB:  Besides  driving  standards, 
I  would  like  them  to  go  out  and  get 


more  customers  involved.  They 
should  bring  them  together  separate¬ 
ly,  and  also  get  them  involved  in  stan¬ 
dards  development,  because  cus¬ 
tomers  are  the  ones  the  vendors  have 
to  ultimately  please. 

I  think  SNIA  feels  sheepish  that 
they  haven’t  done  that,  but  I  think 
they  also  feel  as  though  it’s  very 
hard  to  get  users  to  participate 
because  as  you  said,  they  have  their 
regular  jobs  —  and  the  standards 
process  is  so  slow. 

COBB:  From  my  own  perspective, 
I  think  it’s  valuable  for  users  to  get 
involved.  The  more  user  involvement 
we  have,  the  mere  things  we’ll  get. 

What  advice  do  you  have  for 
users  who  are  implementing  stor¬ 
age  networks? 

COBB:  Do  your  research.  Talk  to 
all  the  vendors.  Go  to  their  labs.  See 
what  they’re  doing.  In  the  case  of  a 
large,  heterogeneous  environment 
like  we  have,  we  opted  to  go  with  an 
integrator  to  help  us  build  a  fabric. 
They  also  helped  us  to  get  all  the 
server  and  storage  vendors  on  the 
same  page. 

We  use  a  company  named  CNT, 
Computer  Network  Technology.  We 
do  data  replication  in  our  mainframe 
environment  using  some  of  their 
products,  so  CNT’s  already  in  the 
storage  networking  business  with  us, 
but  they  don’t  care  about  a  particular 
server  or  storage  option. 

They  just  like  to  do  the  integra¬ 
tion  piece,  so  we  turned  to  them  and 
said,  “Hey,  we  want  to  do  this,"  and 
we  brought  them  on-board  to  help  us 
come  up  with  the  architecture  and 
the  right  way  to  build  our  SAN  infra¬ 
structure. 
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Wired  for  Success 

Hitachi  storage  system  provides  instant  ROI 
for  Focal  Communications 


Focal  Communications  Corp. 
needed  a  storage  system  that  would 
offer  the  company  24/7  availability, 
ease  of  management,  and  the  ability 
to  scale  as  its  data  grows.  As  a 
national  phone  company,  Chicago- 
based  Focal  needs  to  support  a  vast 
amount  of  reporting  for  its  corpo¬ 
rate  clients.  This  means  keeping 
track  of  millions  of  customer 
records,  a  job  that  would  cause  pro¬ 
nounced  infrastructure 
problems  if  left  unad- 
dressed. 

As  senior  manager  of 
Focal’s  data  center  in 
Arlington  Heights,  Ill., 

Philip  Brown  experi¬ 
enced  first-hand  how  the 
company’s  storage  infra¬ 
structure  was  growing  out  of  con¬ 
trol.  With  more  customers  expect¬ 
ing  instantaneous  access  to  billing 
information  and  service  records, 
storage  bottlenecks  became  increas¬ 
ingly  common  —  and  storage  man¬ 
agement  ever  more  challenging. 

When  Brown  began  his  search 
for  a  solution.  Focal  had  approxi¬ 
mately  100  Windows  and  Sun 
Solaris  servers,  many  using  direct- 
attached  storage  (DAS).  That  meant 
100  points  of  administration,  100 
points  of  power,  and  100  points  of 
connectivity  had  to  be  managed. 


“We  were  able  to  look  across  our 
environment  and  see  up  to  300GB  of 
available  storage,”  Brown  says.  “The 
problem  was,  we  couldn’t  utilize 
that  storage  beyond  30GB  because  it 
was  so  dispersed  and  fragmented 
across  servers.” 

And  Focal’s  rapid  growth  prom¬ 
ised  to  exacerbate  these  woes. 
Brown  considered  continuing  the 
company’s  DAS  approach,  but  this 
would  impose  greater 
congestion  problems, 
and  would  do  nothing  to 
alleviate  repeated  storage 
hardware  costs.  With  all 
internal  avenues 

exhausted.  Focal  recog¬ 
nized  it  needed  an  enter¬ 
prise  storage  solution. 

The  assessment 

Before  making  a  decision,  Brown 
worked  with  outside  consultants 
and  created  a  matrix  of  top  storage 
vendors.  He  wanted  Hitachi  Data 
Systems  included  in  the  assessment 
because  of  Hitachi’s  reputation  as  a 
quality  player  in  the  storage  arena. 
When  they  compared  providers  side 
by  side,  Brown  and  a  team  of  Focal 
system  administrators  focused  on 
criteria  such  as  manageability,  scala¬ 
bility,  performance,  professional 
services,  and  cost. 


After  reviewing  Focal’s  storage 
requirements,  Brown  determined 
that  only  a  very  highly  available  stor¬ 
age  solution  —  one  that  would  scale 
seamlessly  in  both  performance  and 
capacity  —  could  be  trusted  with 
the  company’s  most  critical  data.  In 
addition,  the  solution  had  to  accom¬ 
modate  8TB  of  existing  storage. 

“That’s  when  we  decided  on  the 
Hitachi  Lightning  9960,”  Brown 
says.  Hitachi’s  revolutionary  Hi-Star 
switch  actually  prevents  bottle¬ 
necks  and  disruption  in  service  by 
offering  64  internal  paths;  if  one 
fails,  63  working  paths  remain.  This 
impressed  Brown’s  team. 

Moreover,  the  Lightning  9960 
didn’t  just  eliminate  bottlenecks  and 
scale  to  meet  increased  demand;  it 
delivered  peace  of  mind  by  way  of 
Hi-Track  remote  monitoring.  Hi- 
Track’s  call-home  feature  ensures 
non-disruptive  service  by  detecting 
and  addressing  potential  system 
problems  before  they  occur. 

In  the  end.  Brown  and  his  team 
were  most  impressed  by  the  features 
and  benefits  of  the  Lightning  9960. 
Besides  offering  high  availability  and 
scalability,  the  Lightning  9960  deliv¬ 
ers  built-in  redundancy,  leading 
software,  and  storage- area  network 
(SAN)  capability.  Brown  was  also 
reassured  to  learn  that  Hitachi  Data 
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Original,  largest,  and  proven  Storage  Networking  forum 
dedicated  to  IT  users 

Sessions  on  IT  planning,  preparedness  and  data  recovery 

Designed  to  equip  storage  solution  buyers  and  users  to  gain 
maximum  ROI 

Featuring  industry  leaders,  exciting  panels,  analyst  updates,  and  a 
50-company,  industry-exclusive  Interoperability  Lab 

User  case  studies,  tutorials,  and  CTO  "chalk  talk”  sessions  on  topics 
such  as  IP  Storage,  Virtualization  and  other  new  technologies 

Package  includes  an  Expo  (solution  showcase),  meals,  receptions, 
and  a  complimentary  (for  users  and  implementers)  golf  outing 
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Chicago-based  Focal 
needs  to  support  a  vast 
amount  of  reporting  for 
its  corporate  clients. 
This  means  keeping 
track  of  millions  of 
customer  records,  a 
job  that  would  certainly 
cause  pronounced 
infrastructure  problems 
if  left  unaddressed. 


Systems  maintains  close  technical 
alliances  with  leading  storage  man- 
agement  software  providers  like 
Veritas. 

At  this  point.  Brown  decided  not 
only  to  select  the  Lightning  9960, 
but  to  pursue  a  long-term  relation¬ 
ship  with  Hitachi  Data  Systems. 

Foresight 

IT  managers  are  under  increasing 
pressure  to  choose  the  best  storage 
solution  for  their  business.  Focal 
Communications  is  absolutely  con¬ 
vinced  it  made  the  right  choice. 
Brown  compared  the  costs  of  pur¬ 
chasing  2TB  of  additional  storage  for 
the  Lightning  9960  storage  system, 
and  purchasing  a  similarly  equipped 
array  from  another  vendor.  The 
result:  the  Lightning  9960  saved 
Focal  $160,000.  “It  was  a  better 
designed  machine  and  saved  us 


money  with  our  first  additional  stor¬ 
age  purchase,”  Brown  says. 

The  growing  national  communi¬ 
cations  provider  also  discovered 
that  based  on  its  current  configura¬ 
tion  of  the  Lightning  9960,  Focal 
could  maximize  the  number  of  stor¬ 
age  frames  on  the  Lightning  9960 
and  realize  a  27TB  storage  capacity. 
“We  wanted  to  come  up  with  a  stor¬ 
age  solution  that  would  scale  to 
meet  our  needs,”  Brown  says.  “The 
Lightning  9960  easily  met  that 
need.” 

With  the  implementation  of  the 
Lightning  9960,  Focal  no  longer 
worries  that  its  storage  infrastruc¬ 
ture  lacks  the  capability  to  scale  as 
its  quantity  of  data  grows.  The  com¬ 
pany  has  since  added  billing, 
account  information,  and  data  ware¬ 
housing  and  provisioning  data  to  its 
Lightning  9960  solution.  With  plans 
to  connect  more  production  servers, 
Focal  has  already  added  another  2TB 
of  capacity  and  plans  to  add  more 
storage  in  the  near  future.  Not  bad 
for  a  company  that  had 
built  its  first  8TB  of  DAS 
on  Sun  and  Compaq  plat¬ 
forms.  “We  now  have  a 
lot  of  confidence  in 
Hitachi  Data  Systems  and 
the  Lightning  9960,” 

Brown  says.  “Fourteen 
months  after  our  Hitachi  storage 
decision,  Sun  identified  the 
Lightning  9960  as  their  enterprise 
storage  solution  of  choice.  I  think  we 
showed  some  good  foresight.” 

Partner  for  the  future 

Named  one  of  the  nation’s  fastest 
growing  technology  companies  by 


Bloomberg  Personal  Finance,  Focal 
Communications’  future  plans 
include  leveraging  the  SAN  connec¬ 
tivity  of  the  Lightning  9960  to  fur¬ 
ther  boost  return  on  investment. 
The  company  also  plans  to  imple¬ 
ment  an  enterprise  backup  solution 
that  will  employ  Brocade  Silkworm 
2800  switches  and  a  StorageTek 
L700  Tape  Library. 

These  switches  will  allow  the 
communications  provider  to  take 
data  from  the  Lightning  9960  and 
copy  to  tape  using  Veritas 
NetBackup  over  Fibre  Channel. 
Another  money-saving  proposition. 
“Rather  than  maintaining  an  inde¬ 
pendent  tape  and  storage  solution 
for  the  UNIX  side  and  the  Windows 
side,  both  will  use  our  new  enter¬ 
prise  backup  solution,”  explains 
Brown.  For  added  assurance.  Focal 
is  also  preparing  to  mirror  its  stor¬ 
age  solution  at  a  remote  data  center 
in  Ohio  using  both  Hitachi 
TrueCopy  and  Shadowlmage  data- 
replication  software. 

With  the  SAN  capa¬ 
bilities  of  the  Lightning 
9960,  Focal  no  longer 
wastes  time  searching  for 
data  on  dispersed  storage 
systems,  and  saves  money 
by  reducing  expendi¬ 
tures  on  additional 
frames  and  connections.  “Our  data 
center  is  now  laid  out  with  Unix 
servers  on  one  side  and  Windows  on 
the  other,”  Brown  says.  “In  the  mid¬ 
dle,  we  have  a  SAN  powered  by  the 
Lightning  9960  that  connects  these 
environments.  As  a  result,  our  infra¬ 
structure  is  much  more  efficient  and 
robust  than  before.” 
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If  You're  Building  A  SAN,  Why  Not  Consider  Using  The  Some  Solutions 
That  Are  At  Th  Heart  Of  96%  Of  The  World's  Storage  Networks? 


Core-  Ige 
Enterpris  S<  utions 

that  span  from  the  data  center,  to  the 
department  level,  all  the  war/  to  the 
very  edge  of  your  enterprise. 


Hard  at  work  at  the  very  heart  of  the  world's  most  demanding  and  reliable  storage 
networks,  you'll  find  McDATA  enterf  ;e  solutions.  In  over  70  of  the  Fortune 
100,  10  of  the  15  largest  U.S.  banks,  and  9  of  the  10  top  ISPs.  We've 
leveraged  our  open  storage  networking  technology  and  fabric  management  software 
expertise  to  create  a  full  family  of  open  enterprise  solutions  —  core-ta-edge. 
Day-in  and  day-out  delivering  99.999%  availability  to  some  of  the  world's  most 
prominent  companies,  we  have  the  experience  you  can  rely  on,  too.  So  go  to  our 
web  site  or  give  us  a  call.  Without  a  doubt,  we've  got  a  solution  that  fits  your  needs. 
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Quick! 

Your  data  center’s  down. 
What’s  the  plan? 


VERiTAS 


86%  of  the  FORTUNE  500*  rely  on  VERITAS  Software,  the  world 
and  recovery.  You  can.  too.  Our  consulting  services  team  is  ready 
design  and  implement  a  data  recovery  plan.  Visit  veritas.com  teds 


leader  in  data  backup 
to  help  \ our  company 
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of  VERITAS  Software  Corporation  m  the  USA  and/or  other  countries'.  Other;  product  names,  or  slogans  mentioned  herein  may  Be  trademarksOr  registered  trademarks  of  tttiif  respective  companies. 
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GRID  POWER 

Grid  computing  is  an  emerging  va¬ 
riety  of  distributed  computing  used 
to  tie  into  vast  networks  of  under¬ 
utilized  CPU  and  storage  capacity. 
It  could  someday  help  brokerages 
settle  stock  trades  on  the  fly  and 
enable  pharmaceutical  firms  to  run 
supercomputer-type  tests  for  can¬ 
cer  and  AIDS  drugs.  PAGE  28 


CONSULTING  CRUNCH 

Unlike  during  previous  recessions 
that  led  to  extra  work,  independent 
IT  consultants  are  finding  it  hard 
to  maintain  a  steady  stream  of  proj¬ 
ects  during  the  current  economic 
slump.  Find  out  what  some  con¬ 
tractors  are  doing  to  keep  their 
businesses  humming.  PAGE  30 


WEB  SITE  PAYOFF 

Companies  like  Staples  and  Steel- 
case  are  comparing  online  and  off¬ 
line  sales  to  determine  whether  in¬ 
vestments  in  their  online  efforts 
are  paying  dividends.  PAGE  34 


CAREER  ADVISER 

Fran  Quittel  offers  guidance  to  a 
Unix  developer  who’s  considering 
a  switch  to  the  Mac  OS  X  market,  a 
Cisco  Certified  Network  Associate 
who  has  no  work  experience  and  a 
Web  designer  who’s  scouting  out 
the  Chicago  market.  PAGE  36 


PAUL  A.  STRASSMANN 

Still  a  Loser’s  Game 

MORE  THAN  SIX  YEARS  AGO  in  this  column  [“Outsourcing: 

A  Game  for  Losers,”  Aug.  21, 1995],  I  demonstrated  that  the 
real  reason  corporations  were  awarding  massive  IT  out¬ 
sourcing  contracts  was  simple:  Just  about  every  firm  that 
was  outsourcing  IT  was  in  financial  trouble. 


That  column  continues  to  be  cited  in  books  and  re¬ 
ports  that  have  addressed  the  viability  of  IT  out¬ 
sourcing.  Meanwhile,  I  continue  to  field  inquiries 
from  CIOs  and  a  few  chief  financial  officers  on 
whether  the  original  findings  remain  valid.  My  cu¬ 
riosity  led  me  to  check  on  some  of  the  largest  recent 
multiyear  contracts  for  firms  that  outsourced  more 
than  half  their  computing  resources. 

Detailed  financial  information  for  1996  through 
2000  was  available  for  eight  such  firms:  AT&T,  Aven- 
tis,  Du  Pont,  Nortel,  Rolls-Royce,  Sainsbury,  Textron 
and  Xerox.  Outsourcing  deals  of  troubled  firms  such 
as  Enron,  which  had  a  huge  IT  outsourcing  contract, 
were  excluded. 

Each  of  the  eight  corporations  that  have  out¬ 
sourced  most  of  their  IT  also  delivered  declining 
returns  on  shareholder  equity  (ROE). 

The  average  ROE  for  the  entire  group  declined 
from  18.2%  in  1996  to  2.5%  in  2000.  That  2.5%  is  be¬ 
low  the  prime  lending  rate,  suggesting  that  many 
shareholders  would  have  been  better  off  since  1996 
investing  in  U.S.  Treasury  bonds  rather  than  holding 
onto  their  shares.  Such  dismal  performance  is  gener¬ 
ally  considered  a  reliable  indicator  of  an  organization 
in  trouble. 

It’s  also  remarkable  that  three  of  the  firms  that 
were  reasonably  profitable  in  1996  subsequently 
showed  rapidly  declining  ROEs  that  turned  negative 
in  2000  —  a  sign  of  financial  failure. 

The  Importance  of  Successful  Outsourcing 

According  to  IDC,  global  IT  outsourcing 
(which  doesn’t  include  application  ser¬ 
vices,  consulting  services,  business 
process  management,  network  manage¬ 
ment  and  desktop  outsourcing)  will  grow 
from  a  $56  billion  industry  in  2000  to  an 
estimated  $100  billion  in  2005. 

The  compound  growth  rate  for  such 
services  will  exceed  12%,  which  is  far 
greater  than  the  maximum  projected 
growth  rate  of  total  corporate  IT  budgets 
of  5%  per  year. 

Since  the  U.S.  accounts  for  about  half  of 


global  IT  spending  and  tends  to  favor  outsourcing 
more  than  the  rest  of  the  world,  the  projected  growth 
rate  of  outsourcing  contracts  by  U.S.  companies  ex¬ 
ceeds  12%.  This  rapid  increase  suggests  that  the  IT 
scene  is  likely  to  be  plagued  by  two  new  perils: 

■  Outsourcing  services  firms  are  likely  to  suffer  un¬ 
foreseen  losses,  quite  possibly  from  contract  dis¬ 
putes,  after  taking  over  damaged  IT  departments 
from  troubled  firms. 

■  Corporations  with  poor  ROEs  could  be  exposed  to 
unwelcome  risks  if  a  major  IT  support  failure  occurs 
during  the  perilous  transition  from  internal  to  out¬ 
sourced  operations,  just  when  there  is  little  room  for 
error  in  systems  management. 

My  observation  that  failing  firms  increasingly  re¬ 
sort  to  outsourcing  as  one  of  their  remedies  doesn’t 
prove  that  the  outsourcing  itself  is  the  cause  of  their 
troubles.  The  direct  connection  between  outsourcing 
and  financial  difficulties  can’t  be  demonstrated  un¬ 
less  one  has  access  to  a  great  deal  of  confidential  in¬ 
formation  about  things  such  as  changes  in  market 
share,  investment  write-offs,  the  effects  of  competi¬ 
tive  actions  or  loss  of  patent  protection. 

Nevertheless,  I  continue  to  find  that  major  out¬ 
sourcing  moves  can  be  a  telling  symptom  of  a 
company  in  trouble,  as  I  have  shown  in  previous 
Computerworld  columns  regarding  General  Motors 
[June  5, 2000],  Xerox  [Nov.  6, 2000]  and  J.P.  Morgan 
[May  7, 2001], 

My  conclusions  about  the  declining 
shareholder  returns  that  are  associated 
with  large  outsourcing  contracts  would  be 
less  convincing  if  I  could  show  that  a  large 
number  of  firms  had  dramatically  im¬ 
proved  their  ROE  before  they  divested 
most  of  their  IT  functions.  But  so  far,  de¬ 
spite  my  best  efforts,  I  have  been  unable  to 
find  such  data. 

So  I  stand  by  my  1995  findings  that  firms 
with  declining  returns  on  shareholder  eq¬ 
uity  should  pursue  IT  outsourcing  only  if 
they  can  demonstrate  provable  financial 
gains  that  improve  otherwise  unfavorable 
financial  conditions.  I 


PAUL  A.  STRASSMANN 

has  always  favored  out¬ 
sourcing  of  IT  functions 
that  deliver  measurable 
financial  improvements. 
Contact  him  at 
paul@strassmann.coni. 
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Companies  are  beginning 
to  use  complex  adaptive 
systems  to  plot  future 
business  scenarios. 

By  Kathleen  Melymuka 


IMAGINE  BEING  ABLE  tO  look 
into  the  future  to  see  how  to¬ 
day’s  policies  and  initiatives 
will  affect  your  company’s 
profitability  and  competitive 
position  10  years  down  the 
road.  That’s  the  vision  a  com¬ 
munity  of  scientists  in  Santa  Fe,  N.M., 
is  trying  to  provide  through  the  busi¬ 
ness  adaptation  of  a  new  type  of  com¬ 
puter-based  simulation. 

Nourished  by  the  brainpower  of  Los 
Alamos  National  Laboratory  and  the 
Santa  Fe  Institute,  a  complexity  think 
tank,  more  than  two  dozen  start-ups 
have  been  using  supercomputers  to  ex¬ 
periment  with  simulations  based  on 
complex  adaptive  system  theory.  Busi¬ 
nesses  have  been  using  computer  sim¬ 
ulations  for  years,  but  complex  adap¬ 
tive  system  modeling  is  different.  Tra¬ 
ditional  models  start  with  assumptions 
from  historical  data;  complex  adaptive 
systems  start  with  the  world  as  it  is 
and  track  the  results  moving  forward. 

This  kind  of  simulation  might  have 
useful  applications  for  all  kinds  of  in¬ 
dustries,  says  Alexander  Linden,  an  an¬ 
alyst  at  Gartner  Inc.’s  Frankfurt  office. 
Financial  services  companies  could 
use  it  to  simulate  capital  markets,  he 
says.  Pharmaceutical  and  chemical 
companies  could  model  the  effects  of 
different  chemicals  on  organisms.  The 
aerospace  industry  could  use  it  to  cre¬ 
ate  materials  that  perform  under 


stress.  Airlines  could  learn  to  optimal¬ 
ly  balance  cargo  for  the  smoothest  pos¬ 
sible  ride,  and  so  on. 

Recently,  several  Santa  Fe-based 
companies  have  brought  the  software 
for  these  simulations  into  the  world  of 
business,  where  early  applications  hint 
at  their  potential. 

Insurance 

In  the  early  1990s,  after  Hurricane 
Andrew  led  to  catastrophic  losses  esti¬ 
mated  at  $25  billion  in  the  U.S.,  proper¬ 
ty  and  casualty  insurers  were  forced  to 
rethink  their  approach  to  risk  manage¬ 
ment.  Some  Santa  Fe  scientists  began 
working  with  big  players  in  the  insur¬ 
ance  industry  such  as  Swiss  Reinsur¬ 


ance  Co.  in  Zurich  and  Marsh  and 
McLennan  Cos.  in  New  York.  “Losses 
were  so  staggering  that  it  shook  the  in¬ 
dustry  to  its  core,”  says  Terry  Dunn, 
president  of  Assuratech  Inc.,  the  Santa 
Fe-based  commercial  enterprise  that 
grew  out  of  the  collaboration. 

Rather  than  try  to  better  predict  the 
likelihood  of  a  hurricane,  he  says,  the 
group  looked  at  the  real  make-or-break 
equation:  How  do  an  insurance  compa¬ 
ny’s  business  plan,  investments  and 
capital  flows  respond  when  a  hurri¬ 
cane  hits?  The  simulator  they  devel¬ 
oped  models  the  environment  within 
which  the  company  operates  in  order 
to  determine  optimum  capital  strate¬ 
gies  for  surviving  catastrophic  losses. 

The  simulator  features  a  “playing 
field”  and  “agents.”  The  playing  Field 
is  the  natural  environment  in  which 
catastrophes  happen  as  well  as  the  fi¬ 
nancial  environment  of  capital  flows. 
The  agents  are  customers,  capital 
markets,  primary  insurers,  reinsurers 
and  regulators.  Agents  interact 
through  customer  choices,  contracts, 
partnerships  and  regulations.  Finally, 
there  are  physical  and  financial  wild 


Characteristics  of 
Complex  Adaptive  Systems 

If  you  want  to  understand  complex  adaptive  systems,  think  football: 

Elements  of  a  simulation 

Defined  space 


■  Interacting  agents  or  objects  that  are 

intelligent  and  adaptive  (a  few  dozen  to  a 
few  hundred  thousand) _ 

■  Agents  have  local  information  only  and 
know  what  only  some  agents  are  doing 

■  Some  random  events  such  as  a  natural 
disaster  or  economic  recession 


Elements  of  a  football  game 

Football  field 


■  Players,  coaches  and  referees  interact 

within  a  set  of  rules,  and  they  adapt  based 
on  what  works _ 

■  Players  see  what  others  in  their  field  of 
vision  are  doing,  but  not  those  behind  them 

■  Wild  cards  such  as  weather  and  injuries 
that  can  affect  the  outcome 


cards  such  as  hurricanes,  earthquakes 
and  recessions. 

Assuratech  creates  a  virtual  copy  of 
the  business  and  the  business  universe. 
The  model  includes  everything  known 
about  competitors,  customers  and  the 
regulatory  environment  as  well  as  the 
company’s  investment  portfolio  and 
operating  strategies:  markets  served, 
preference  for  profit  or  market  share, 
desired  investment  growth  rates  and 
efficiency  of  capital,  adjusted  cost  of 
capital,  and  so  on. 

When  a  “universe”  of  data  has  been 
programmed,  the  simulator,  which  can 
run  on  any  high-end  laptop,  drops  in 
random  physical  and  financial  cata¬ 
strophes  and  tracks  capital  flows 
through  the  company  on  a  quarterly 
basis  for  a  virtual  10-year  period  to  see 
how  the  organization  fares  compared 
with  its  competitors.  The  company’s 
strategies  can  be  adjusted  to  see  how 
changes  would  affect  the  outcome. 

For  example,  if  the  simulation  shows 
that  investing  in  gold  futures  seems 
more  profitable  than  investing  in 
stocks,  the  company  can  shift  its  capi¬ 
tal  to  that  segment  and  see  how  the 
change  affects  the  bottom  line.  “The 
key  here  is  that  you  get  to  model  your 
world  before  you  commit  your  re¬ 
sources,”  says  Dunn. 

“The  business-as-usual  model  for  an 
insurer  is  to  project  the  future  based 
on  experience  from  history,”  says  John 
Schienle,  director  of  the  California 
Housing  Loan  Insurance  Fund,  a  Sacra¬ 
mento-based  state  agency  that  issues 
mortgage  loans  for  low-  and  moderate- 
income  people.  The  agency  has  been 
using  the  simulator  for  nearly  three 
years. 

“Assuratech’s  model  lets  us  see  what 
would  result  from  various  manage¬ 
ment  actions  based  on  simulated 
events,”  says  Schienle.  The  agency  can 
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then  adjust  its  strategies 
accordingly,  he  explains. 

Without  the  simulator, 
Schienle  says,  this  would 
be  impossible.  “There  are 
so  many  factors  involved 
in  trying  to  model  an  in¬ 
dustry,  it’s  complex  be¬ 
yond  what  a  human  can 
imagine,”  he  says. 


Supply  Chain 
Modeling 

At  Procter  &  Gamble 
Co.  (P&G)  in  Cincinnati, 

Larry  Kellam  has  been  us¬ 
ing  complex  adaptive  sys¬ 
tem  theory  for  two  years 
in  an  effort  to  improve 
P&G’s  supply  chain  dy¬ 
namics.  “We’re  trying  to 
move  to  a  consumer- 
driven  supply  network,”  says  Kellam, 
director  of  business-to-business  supply 
chain  innovation.  “We  are  all  about  tak¬ 
ing  time,  cost  and  cash  out  of  supply 
chain  to  add  value  to  the  consumer.” 

As  part  of  this  effort,  P&G  has  been 
working  with  Santa  Fe-based  Bios- 
Group  Inc.,  a  consulting  and  complexi¬ 
ty  modeling  firm,  to  look  at  how  differ¬ 
ent  approaches  might  improve  its  sup¬ 
ply  chain  efficiency. 

BiosGroup  developed  models  of 
P&G’s  supply  chain  and  then  tried  new 
policies  and  approaches  virtually.  For 
instance,  what  if  P&G  relaxed  its  poli¬ 
cies  that  delivery  trucks  had  to  be  full 
and  that  pallets  stacking  products  with¬ 
in  the  trucks  could  have  only  one  type 
of  item  each?  What  if  orders  were 
checked  and  redirected  at  the  last 
minute  rather  than  based  on  customer 
projections?  What  if  supermarkets  and 
other  customers  shared  information 
about  planned  product  promotions 
that  might  change  their  supply  needs? 


AT  A  GLANCE 


Practical 

Scenarios 

■  Insurance:  risk  exposure 

■  Finance:  capital  market 
behavior 

■  Airlines:  aircraft  load 
balancing,  passenger 
management 


■  Manufacturing:  supply 
chain  optimization 

■  Retail:  consumer  buying 
patterns 

■  Aerospace,  auto- 
motive:  aerodynamics 

■  Defense:  scenario 
planning 


By  testing  various  sce¬ 
narios,  BiosGroup  found 
several  hundred  million 
dollars  in  potential  sav¬ 
ings,  and  real-world  tests 
with  customers  con¬ 
firmed  those  findings. 
“None  of  these  ideas  was 
new,”  says  Stuart  Kauff¬ 
man,  president  of  Bios¬ 
Group.  “They  just  could¬ 
n’t  quantify  how  impor¬ 
tant  they  were  before.” 

P&G  has  embarked  on 
a  massive  project  in  part¬ 
nership  with  BiosGroup, 
software  developer  i2 
Technologies  Inc.  in  Dal¬ 
las,  MIT’s  Auto-ID  Center 
and  other  organizations 
_  to  find  practical  applica¬ 
tions  for  adaptive  theory. 
The  initiatives  include  the  following: 

■  Developing  “smart”  replenishment 
software  for  integration  into  P&G’s  en¬ 
terprise  resource  planning  system. 

■  Replacing  universal  product  codes 
with  electronic  smart  tags. 

■  Overhauling  infrastructure  to  allow 
real-time  demand  signals  between 
stores  and  manufacturing  facilities. 

■  Embedding  complex  adaptive  theory 
into  a  distribution  resource  planning 
tool  to  get  inventory  to  where  it’s  real¬ 
ly  needed  regardless  of  what  the  pur¬ 
chase  orders  say. 

It’s  a  big  job,  and  Kellam  acknowl¬ 
edges  that  the  results  might  still  be  five 
years  away.  “But  if  we  do  it  right,  we 
think  we  can  take  about  half  of  all  of 
our  inventory  out  of  the  system,  on  the 
order  of  20%  of  our  cost  and  at  least 
half  of  the  time,”  he  says. 

Are  the  possibilities  of  complexity 
modeling  worth  exploring?  “Absolute¬ 
ly!”  says  Gartner’s  Linden.  “There’s  al¬ 
ways  an  increase  in  accuracy  if  you  de¬ 
ploy  specialists  like  those  companies 
near  Santa  Fe.” 

But  the  one  thing  they  can’t  predict, 
he  says,  is  the  effect  of  complexity  mod¬ 
eling  on  your  bottom  line.  “You  need 
to  have  the  right  data  and  know 
whether  the  prediction  accuracy  is  re¬ 
ally  related  to  added  business  value,” 
he  explains.  “Even  if  you  do  increase 
accuracy,  the  amount  you  invest  may 
not  justify  the  return. . . .  Nobody  can 
tell  you,  and  that  may  be  why  the  in¬ 
dustry  is  not  growing  as  quickly  as 
some  people  expected.”  > 

While  much  of  the  Santa  Fe 
complexity  community  is  building 
virtual  worlds,  find  out  how 
Strategic  Analytics  Inc.  focuses 
on  dismantling  the  real  world, 
www.computerworld.com/q 726596 
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Some  pioneers 
are  already  using 
grids  in  data-  and 
CPU-hungry  pur¬ 
suits  such  as  life 
sciences  R&D 
and  engineering 
and  design,  but  ex 
perts  say  widespread 
business  use  is  far  away. 
By  Ted  Smalley  Bowen 

UNTIL  RECENTLY  THE  PURVIEW  of  astro¬ 
physicists  and  drug  designers,  grid  com¬ 
puting  is  a  prime  example  of  “latest-great¬ 
est  syndrome”  in  the  enterprise  technolo¬ 
gy  business. 

Some  bleeding-edge  companies  are  al¬ 
ready  using  grids  in  data-  and  CPU-hungry  pursuits 
such  as  media  production,  life  sciences  research  and 
development,  and  engineering  and  design,  but  ex¬ 
perts  say  widespread  business  use  is  still  several  years 
off  and  not  without  caveats. 

Nonetheless,  computer  industry  heavyweights  and 
assorted  start-ups  are  staking  out  turf  in  the  brave 
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new  world  of  computational  grids  —  potentially  vast 


agglomerations  of  computing  muscle  and  data  that 
promise  to  fuel  e-commerce  and  enterprise  applica¬ 
tions  while  also  serving  scientific  and  technical  needs. 

Grid  computing  emerged  as  a  means  for  scientific 
researchers  to  tackle  complex  problems,  the  calcula¬ 
tion  and  processing  of  which  would  overwhelm  even 
the  most  powerful  supercomputers.  Whether  they 
scrape  together  CPU  cycles  from  idle  workstations 
or  harness  multiple  supercomputers,  grids  provide 
the  framework  for  assembling  sophisticated,  ultra¬ 
powerful  virtual  computers. 

These  assemblages  of  distributed  resources  are 
coordinated  by  software  that  handles  the  differences 
among  computer  operating  systems  and  manages 
things  like  scheduling  and  security.  Grids  can  make 
available  a  wide  range  of  CPU  cycles,  storage  and 
other  resources. 

Grid  Aiert 

Grids  have  generally  been  used  in  business  for 
some  time  in  the  form  of  search  engine  farms  and 
systems  handling  bioinformatics  and  media  special 
effects,  among  other  applications,  notes  Nick  Gall,  g 
an  analyst  at  Meta  Group  Inc.  in  Stamford,  Conn.  5 

The  grid  rubric  covers  a  wide  range  of  private  and  a 
public  systems,  some  under  the  control  of  single 
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entities  and  others  run  by  coalitions.  To  date,  many 
grids  have  taken  shape  in  the  academic  and  govern¬ 
ment  research  communities,  some  on  a  nationwide 
scale.  Others  are  internal  corporate  setups. 

Some  of  the  more  high-profile  grids  include  gov¬ 
ernment  projects  such  as  the  National  Science  Foun¬ 
dation’s  National  Technology  Grid,  NASA’s  Informa¬ 
tion  Power  Grid  and  the  European  Union’s  DataGrid. 
There  are  also  private  corporate  efforts  in  the  aero¬ 
space,  pharmaceutical  and  automotive  industries. 

Grids  could  set  the  stage  for  a  more  adaptable  and 
viable  second  wave  of  application  service  providers 
(ASP)  and  their  acronymic  cousins,  xSPs.  They  could 
also  form  the  basis  of  more  flexible  and  powerful  in¬ 
tranets  and  extranets. 

Part  of  the  attraction  is  the  prospect  of  putting  the 
right  mix  of  CPU  power,  data  and  bandwidth  at 
users’  disposal  as  they  need  it,  whether  that’s  sup¬ 
plied  through  a  private,  highly  secure  grid  configura¬ 
tion  or  a  loosely  coupled  publicly  available  grid. 

The  prospect  of  plugging  into  grids  instead  of  lay¬ 
ing  out  huge  sums  of  money  to  upgrade  internal  sys¬ 
tems  has  an  obvious  appeal  to  companies  trying  to 
weather  a  down  market. 

“[Given]  the  paucity  of  skilled  people  out  there 
and  the  cost  of  training,  there  will  be  a  progressive 
desire  to  [create  a]  coagulation  of  technology  in  a 
way  to  really  leverage  the  skills  that  do  exist  and  still 
provide  the  level  of  service  users  are  really  looking 
for,”  says  Dave  Turek,  vice  president  of  emerging 
technologies  at  IBM. 

In  addition  to  technology  heavyweights  such  as 
IBM,  Sun  Microsystems  Inc.  and  Hewlett-Packard 
Co.,  smaller  players  such  as  Markham,  Ontario-based 
Platform  Computing  Corp.,  San  Diego-based  En- 
tropia  Inc.  and  Austin,  Texas-based  United  Devices 
Inc.  are  pushing  various  enterprise  and  vertical- 
industry  grid  tools  as  well. 

But  don’t  look  for  grids  to  overlay  the  enterprise 
for  at  least  a  few  more  years,  because  the  infrastruc¬ 
ture  tools  and  business  adaptations  are  still  taking 
shape,  according  to  observers. 

“Full-blown  grid  computing  is  still  about  two  to 
three  years  out,  and  five  years  from  being  a  big  im¬ 
pact,”  says  Gall. 


Grid  Crossing 

The  following  are  some  vertical  industries 
and  potential  applications  for  CPU  and 
storage-intensive  grid  networks: 

FINANCIAL  SERVICES:  Brokerages  could  use  them 
to  clear  and  settle  trades  quickly  instead  of  relying  on 
lengthy  batch-processing  runs:  investment  banks 
could  also  tap  into  them  to  run  risk  analyses.  Insurers 
could  use  them  to  try  to  predict  the  potential  cost  out¬ 
lays  of  a  major  earthquake  or  other  disasters  for  com¬ 
mercial  and  residential  customer  policies. 


HEALTH  CARE:  Pharmaceuticals  could  use  them  to 
run  CPU-intensive  calculations  on  experimental  drugs 
that  are  being  developed. 

AUTOMOTIVE:  Automakers  could  use  grids  to  run 
simulated  tests  on  the  aerodynamics  of  vehicles  that 
are  being  developed. 


AEROSPACE  AND  DEFENSE:  Big  aerospace  and 
defense  contractors  could  use  grids  to  conduct  simu¬ 
lated  stress  tests  on  fighter  jets  or  space  shuttles. 


To  that  end,  the  business  models  for  delivering, 
supporting  and  charging  for  grid  services  and  appli¬ 
cations  also  have  yet  to  jell.  And  while  it  might  be 
tempting  to  view  grids  as  the  one  hammer  for  all 
your  nails,  the  trick  for  IT  managers  is  to  identify  if 
and  where  grids  are  appropriate.  Work  remains  on 
such  key  functions  as  load  balancing,  cluster  man¬ 
agement,  resource  identification  and  sharing  and 
database  integration,  as  well  as  ensuring  a  useful 
degree  of  standardization,  according  to  observers. 

Gridlock 

Indeed,  the  transition  won’t  be  automatic,  since 
R&D  labs  have  different  computing  needs  than  cor¬ 
porate  IT  centers. 

“A  grid  as  an  object  that  scavenges  spare  cycles 
from  someplace  is  less  useful  to  the  enterprise  than  a 
grid  as  a  mechanism  for  locating  data  resources,” 
says  Robert  Hollebeek,  a  physics  professor  and  direc¬ 
tor  of  the  National  Scalable  Cluster  Project  at  the 
University  of  Pennsylvania  in  Philadelphia. 

As  a  first  step,  IT  managers  would  be  wise  to  ask, 
“Are  they  really  in  an  enterprise  that  could  benefit 
from  better  communication  and  sharing  of  resources 
in  a  wide-area  networked  setting?  If  so,  they  could 
start  adopting  some  authentication  mechanisms  so 
they  can  participate  in  a  grid  with  trusted  entities,” 
Hollebeek  advises. 

“In  the  context  where  it’s  hard  to  predict  how 
much  you’ll  need  to  ramp  up  your  systems  and  what 
you’ll  need  to  integrate,  grid  computing  provides 
some  flexibility,”  says  Paul  Kearney,  director  of  bio¬ 
informatics  at  Caprion  Pharmaceuticals  Inc.  in  Mon¬ 
treal.  “It’s  not  clear  to  me  that  someone  would 
choose  to  migrate  to  grid  computing  when  their  data 
is  more  homogeneous  and  integration  of  technology 
moves  at  a  slower  rate.” 

Plus,  computers  strung  together  in  a  distributed 


fashion  would  be  virtually  useless  for  many  low- 
latency  applications,  which  would  be  bogged  down 
by  the  Internet’s  communications  delays. 

“I  don’t  find  the  concept  of  lashing  computers  to¬ 
gether  with  grid  middleware  to  do  very  large  calcula¬ 
tions  appealing.  Many  of  the  compute-intensive  ap¬ 
plications  of  interest  to  us  have  stringent  latency  and 
bandwidth  demands,”  says  Thom  Dunning,  director 
of  the  North  Carolina  Supercomputing  Center  in 
Research  Triangle  Park  and  vice  president  of  high- 
performance  computing  and  communications  for  its 
parent  organization,  MCNC.  CPU-hungry  enterprise 
applications  fall  into  this  category. 

Finding  a  Fit 

The  appropriateness  of  grid  computing  depends 
on  whether  businesses  “have  problems  that  need  sig¬ 
nificant  computational  resources  and  can  be  distrib¬ 
uted,”  says  Alex  Bangs,  chief  technology  officer  at 
Entelos  Inc.,  a  Menlo  Park,  Calif.-based  bioinformat¬ 
ics  company.  “Do  they  really  need  to  sit  on  some 
giant  64-processor  machine  or  some  big  mainframe, 
or  can  they  be  broken  up  into  small  pieces  and  those 
small  pieces  be  crunched  on  a  smaller  machine, 
whether  that  machine  is  sitting  in  a  server  room 
somewhere  or  whether  that  machine  is  some  idle 
cycles  from  somebody’s  desktop?” 

Entelos  develops  complex  computer  models  of 
human  diseases  and  virtual  laboratory  software  for 
researching  the  diseases  and  developing  treatments. 
The  company  works  with  pharmaceutical  giants  such 
as  Aventis,  Pfizer  Inc.  and  AstraZeneca  PLC,  whose 
vast  intranets  and  countless  desktops  make  them 
ideal  grid  computing  users.  Both  Entelos  and  the 
pharmaceutical  companies  use  grid  computing  to 
fuel  the  heavy-duty  processing  needed  to  run  the 
virtual  experiments. 

“We’re  doing  a  specialized  kind  of  modeling.  In 
general,  people  do  all  kinds  of  models  —  there’s  fi¬ 
nancial  models,  and  even  the  data  mining  is  a  lot  of 
times  based  on  a  model,”  Bangs  says.  “What  scaling 
up  to  grid  computing  means  is  being  able  to  look  at 
many,  many  more  variations  of  those  models.” 

Players  in  other  industries  such  as  automotive 
design  are  also  beginning  to  harness  the  potential 
of  grid  computing. 

“We’re  working  on  the  complete  aerodynamics  of 
the  race  car,”  says  Kevin  Colburn,  team  leader  for 
computational  fluid  dynamics  at  the  West  McLaren 
Mercedes  Formula  One  racing  team  in  Woking,  U.K. 
“We’re  concentrating  on  typical  kinds  of  aerospace 
things  like  the  front  and  rear  wings  of  the  car.  But  we 
also  analyze  suspension  components  for  their  angle 
and  orientation,  [as  well  as]  radiator  flow,  air  box, 
you  name  it.” 

More  important,  grids  “allowed  us  to  do  the  same 
amount  of  work  quicker,  and  then  allowed  us  to  re¬ 
search  other  areas  of  the  car  that  we  may  not  have 
done  previously  because  we  didn’t  have  the  compute 
capability,”  Colburn  says.  > 


Bowen  is  a  contributing  editor  at  Technology  Research 
News.  Contact  him  at  ted_bowen@hotmail.com. 


To  learn  more  about  the  security  challenges  facing 
grid  computing,  go  to: 

www.computerworld.com/q726598 
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Normally,  the  sky’s  the  limit  when 
it  comes  to  consulting  opportu¬ 
nities  in  a  bad  labor  market. 
Not  this  year.  Merely  surviv¬ 
ing  will  be  a  challenge,  and 
many  will  find  themselves 
earning  less  or  doing  other 
things.  By  Leslie  Jaye  Goff 

According  to  conventional  wis¬ 
dom,  IT  consultants  should  have  a 
stellar  year,  due  to  the  downward- 
spiraling  economy.  But  looking  out 
over  the  next  12  months,  2002  is 
shaping  up  to  be  a  highly  unconventional  year. 

Traditionally,  independent  consultants  and 
consulting  agencies  are  in  high  demand  during 
economic  downturns.  After  periods  of  massive 
layoffs,  companies  reluctant  to  add  full-time 
staffers  to  their  payrolls  have  turned  to  contract 
employees  to  fill  the  gaps  on  IT  projects. 

But  despite  economic  conditions  that  have 
been  good  for  IT  consultants  in  the  past,  many 
consultants  and  agencies  say  they  fear  a  drastic 
downturn  in  their  business  this  year. 

“Business  is  deadly  slow  —  slower  than  I’ve 
ever  seen  it,”  says  Beverly  Nadelson,  vice  presi¬ 
dent  of  All  Star  Consulting  Inc.  in  San  Francisco. 
“Generally,  around  this  time  of  year,  our  clients  are 
calling  about  their  upcoming  projects.  But  I’m 
hearing  none  of  the  usual  noise  about  anything 
new,  and  that’s  not  a  good  sign.” 

The  fortunate  consultants  had  gigs  that  saw  them 
through  the  end  of  2001,  but  as  they  started  to  look  for 
first-quarter  work  in  December  and  January,  many 
came  up  dry.  While  some  independent  consultants  and 
agencies  say  they  cautiously  hope  to  generate  at  least  as 
much  revenue  as  they  did  last  year,  none  of  them  expect  the 
blockbuster  growth  they  took  for  granted  in  the  late  1990s. 

For  many,  the  slowdown  started  last  year  in  response  to  continu¬ 
ing  dot-com  closures,  the  slumping  stock  market  and  corporate  cut- 
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backs.  While  a  July-to-August  slowdown  is  business 
as  usual  for  most  consultants,  some  say  the  economic 
instability  that  followed  the  events  of  Sept.  11 
quashed  the  usual  fall  rebound. 

Greg  Hollings,  president  of  Visionary  Computer 
Consulting  Inc.  in  Lakewood,  Colo.,  says  that  the  ter¬ 
rorist  attacks  on  the  U.S.  decimated  his  prospects.  He 
expects  his  business  to  be  down  by  30%  this  year. 

“I  was  just  totally  floored  by  how  much  of  an  effect 
[Sept.  11]  had  on  my  business,”  says  Hollings,  a  Java 
applications  developer  who  spent  much  of  2000  and 
2001  working  with  dot-coms  and  telecommunica¬ 
tions  firms.  With  the  high-tech  industry  downturn, 

“it  was  already  getting  quieter,  but  it  seemed  that  was 
just  the  last  nail  in  the  coffin,”  he  says.  “A  lot  of 
clients  just  shut  their  doors  and  stopped  talking.  It 
has  been  flat  since  then.” 

Even  consultants  who  are  getting  inquiries  from 
potential  clients  express  concern  about  client  com¬ 
panies’  ability  to  pay  for  IT  consulting  services. 
“There’s  just  no  money,”  Nadelson  says. 

David  Randolph,  an  independent  consultant  in 
Plano,  Texas,  says  he’s  getting  the  usual  number  of 
calls  from  prospective  clients  that  he  typically  gets  at 
the  beginning  of  a  new  calendar  year.  But  he  has  also 
seen  clients’  budgets  dry  up.  His  company,  Prairie 
Trail  Software  Inc.,  generated  more  volume  in  2001 
than  in  2000,  but  its  revenue  was  down  because 
many  clients  couldn’t  pay  their  bills. 

“Many  of  the  checks  we  received  bounced,”  ex¬ 
plains  Randolph.  “I’d  love  to  say  we’ve  worked  out 
payment  plans  with  them,  but  we  keep  checking  with 
their  banks,  and  they  still  don’t  have  the  money.” 

Good  Times  Ahead? 

Despite  a  rough  first  quarter,  many  in  the  IT  con¬ 
sulting  community  remain  steadfastly  optimistic 
about  a  second-  or  third-quarter  upswing  in  both  the 
economy  and  their  prospects. 

Independent  consultants  acknowledge  that  the 
days  of  juggling  three  or  four  simultaneous  projects 
at  high  rates  are  behind  them  for  now.  But  they  say 
they  expect  that  pent-up  demand  for  mission-critical 
projects  will  finally  loosen  clients’  purse  strings  and 
that  the  market  forces  that  have  traditionally  favored 
consultants  will  come  back  into  play. 

“Any  company  that  wants  to  gain  a  competitive  ad¬ 
vantage  and  has  the  wherewithal  to  do  so  will  use 
consultants,”  says  Randy  Hayman,  president  and  co¬ 
owner  of  IT  services  firm  Purelce  Inc.  in  Eagan, 
Minn.  “They  won’t  want  to  take  the  payroll  risk  of 
adding  full-time  employees  until  they  see  some  cer¬ 
tainty  in  their  future.  And  that’s  why  I  continue  to  be 
upbeat  on  2002.” 

Consultants  and  agencies  say  they  expect  compa¬ 
nies  to  go  forward  with  technology  initiatives  that 
generate  new  business,  such  as  customer  loyalty  pro¬ 
grams  and  other  customer  relationship  management 
applications.  Another  key  area  of  consulting  activity 
should  be  systems  that  streamline  business  processes 
and  cut  costs,  such  as  supply  chain  management  sys¬ 
tems,  they  say. 

The  health  care  industry’s  mandate  to  comply  with 
the  Health  Insurance  Portability  and  Accountability 
Act  of  1996  may  also  create  consulting  opportunities, 
consultants  and  agencies  say.  With  those  initiatives 
already  consuming  IT  staff  resources,  health  care 
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Get  Back 
To  Work! 

Job-searching  advice  for 
unemployed  IT  consultants: 

o 

Get  out  and  network. 

© 

Market  your 
problem-solving  skills. 

© 

Prepare  to  adjust 
your  rates. 

Be  open  to  agencies 
and  recruiters. 

© 

Volunteer  your  services 
to  a  nonprofit  group. 

© 

Consider  forming 
your  own  consulting 
practice. 

© 

Maintain  a 
positive  attitude. 
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providers  may  turn  to  consultants  for  other  projects. 

The  key  to  getting  a  foot  in  the  door  on  these  types 
of  projects  this  year,  consultants  and  agencies  ex¬ 
plain,  will  be  promoting  your  business  expertise  and 
customer  service  ethic  rather  than  specific  technical 
skills.  “You  need  to  change  your  frame  of  mind,”  says 
Randolph.  “Show  customers  that  you’ll  do  everything 
you  can  to  resolve  a  business  problem  for  them.” 

Consultants  can  also  no  longer  rely  on  receiving 
the  high  rates  they’ve  commanded  during  the  past 
few  years,  particularly  in  the  traditionally  higher¬ 
paying  markets.  In  the  San  Francisco  Bay  area,  for  ex¬ 
ample,  the  rates  clients  are  willing  to  pay  have  gone 
down  by  20%  to  25%,  says  Nadelson. 

“Rates  are  completely  client-driven,  so  you  have  to 
figure  out  what  a  client  wants  to  pay  and  go  from 
there,”  she  explains.  “We  have  one  project  manager 
who  was  getting  $100  an  hour,  and  now  the  most  that 
a  client  will  pay  for  project  management  is  $60  an 
hour.  The  rates  are  going  down  to  where  they  were 
five  to  seven  years  ago.” 

Although  the  outlook  is  uncertain,  seasoned  con¬ 
sultants  are  riding  out  the  downturn  with  an  eye  on 
the  long  haul.  They’re  taking  the  requisite  steps  to 
generate  new  business  —  networking  with  col¬ 
leagues,  repositioning  their  marketing  messages  and 
evaluating  new  specialties  to  pursue  —  but  they  also 
say  that  they’re  giving  the  market  ample  time  to  re¬ 
cover  before  they  hit  the  panic  button. 

Christine  Hokans,  president  of  CMH  Systems  Inc. 
in  Belmont,  Calif.,  counts  herself  among  the  lucky 
consultants  who  had  a  steady  project  through  the 
end  of  last  year.  She  says  she’s  giving  herself  three 
months  to  line  up  her  next  gig.  At  that  point,  Hokans 
plans  to  evaluate  looking  for  a  staff  position,  al¬ 
though  she’s  loath  to  consider  it. 

In  the  meantime,  Hokans  says  she’s  using  her  free 
time  to  seek  IT  volunteer  opportunities  and  attend 
user  group  and  professional  association  meetings  for 
face-to-face  networking.  She’s  also  eliminating  extra¬ 
neous  expenditures. 

“My  husband  and  I  eat  out  a  lot,  and  we  made  a 
New  Year’s  resolution  that  we’ll  cook  all  but  one 
night  a  week,”  Hokans  says.  “So  I’ve  got  all  my  cook¬ 
books  out.  And  no  more  Starbucks  every  day.” 

Instead  of  panicking,  Hokans  and  other  consul¬ 
tants  say  they’re  trying  to  view  their  newfound  free¬ 
dom  as  the  silver  lining  of  the  economic  slowdown. 
They  say  they’re  spending  more  time  with  their  fam¬ 
ilies,  purging  the  stacks  of  papers  and  magazines  that 
clutter  their  offices,  getting  back  to  the  gym  and  pur¬ 
suing  other  activities  that  they  haven’t  had  the  spare 
time  to  enjoy. 

“One  of  reasons  I  got  into  consulting  was  to  have 
more  control  over  my  personal  life,  and  I’ve  had  a  lot 
of  personal  time  in  the  last  quarter,”  Hollings  says. 
“I’m  thoroughly  enjoying  that.  I’m  an  irrepressible 
optimist,  or  I  never  would  have  become  a  consultant 
to  begin  with.”  ► 

Goff  is  a  freelance  writer  in  New  York.  Contact  her 
at  lgoff@ix.netcom.com. 


IT  HIRING  2002 

For  access  to  this  article  online,  additional  resources  and  related  links,  please 
visit  Computerworlds  Web  site  at  www.computerworld.com/q725915 
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@  business  infrastructure 


QUALITY  OF  SERVICE 

AVOIDING  EVEN  THE  SMALLEST  MISTAKES. 


J 

QUALITY  OF  SERVICE.  It’s  much  more 
than  giving  your  customers  super  service. 
It’s  about  getting  your  IT  systems  to  extend 
the  courtesy  as  well. 

That  would  mean  they  are  available, 
scalable  and  performing,  around  the  clock. 
But  how  do  you  get  there,  now? 

You  start  with  consulting  in  the  shape  of 
IBM  Global  Services.  We’ll  uncover,  and 
eliminate,  any  technical  glitches  in  your 
infrastructure  before  they  turn  into  crises 
or  customer  care  problems. 

Then,  employ  Tivoli®  software  to  ensure 
content  is  current  and  always  available.  If 
there’s  ever  a  problem  Tivoli  is  sure  to  find 
it  long  before  your  customers  do.  To  top  it 
off,  Tivoli’s  security  policies  can  ensure 
your  site  is  always  completely  protected. 

Right  now,  together  with  our  Business 
Partner  CommercialWare,  we’re  now  helping 
Patagonia,  an  environmentally  conscious 


maker  of  outdoor  clothing,  conduct  their 
e-business  24  hours  a  day.  Their  customers 
can  now  have  immediate  access  to  order 
information  at  all  times,  regardless  of  what 
channel  they  used  to  place  their  orders. 

The  result?  Patagonia’s  customer  relations 
have  improved  and  Patagonia.com  revenue 
has  grown  year  by  year. 

But  this  is  just  the  beginning.  There’s 
more  on  the  way.  Soon  we’ll  be  seeing  self- 
optimized  environments:  environments  with 
systems  that  are  capable  of  healing,  protecting 
and  configuring  themselves. 

These  environments  are  as  flexible  as  your 
customers,  partners  and  suppliers  expect 
them  to  be. 

Find  out  all  that  you  can,  soup  to  nuts, 
at  ibm. com/e-business/quality,  or  call 
800  426  7080  (ask  for  Quality)  for  our  latest 
white  paper,  Quality  of  Service  -  Evolving 
to  the  Next  Generation. 
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Calculating 

Web  Site  Payoff 

Forget  counting  page  hits.  Compare 
online  and  off-line  sales  to  determine 
true  ROI.  By  John  Webster 


Despite  last  year’s  dot¬ 
com  disasters,  the  Web 
continues  to  be  a  part  of 
virtually  every  compa¬ 
ny’s  marketing  strategy. 
The  question  isn’t 
whether  or  not  to  have 
an  online  presence;  it’s  how  to  tell 
whether  —  and  by  how  much  —  the 
Internet  increases  market  share  and 
fattens  the  bottom  line. 

The  problem  is  that  most  companies 
have  no  idea  how  to  accurately  mea¬ 
sure  return  on  investment  when  it 
comes  to  their  Web  sites.  Counting  hits 
and  monitoring  visitor  behavior  have 
become  de  rigueur,  but  neither  one  an¬ 
swers  the  thorny  question  of  how 
much  a  company  earns  —  or  saves  — 
by  marketing  on  the  Web. 

Meanwhile,  even  in  the  midst  of  a 
down  economy,  companies  continue  to 
invest  money  in  their  Web  sites.  But 
now  top  managers  are  pushing  harder 
than  they  once  did  for  proof  that  the 
sites  are  more  than  glitzy  money  pits, 
according  to  Lisa  Melsted,  an  analyst  at 
The  Yankee  Group  in  Boston. 

The  average  company  budget  alloca¬ 
tion  for  a  Web  site  is  about  $500,000 
annually,  according  to  a  survey  of  200 
companies  that  The  Yankee  Group 
conducted  in  August  2001.  While  over¬ 
all  expenditures  have  likely  come 
down  somewhat  over  the  past  several 
months  due  to  cutbacks  and  layoffs, 
Web  site  maintenance  is  still  a  large 
expenditure,  Melsted  says. 

Comparing  Web  sales  with  sales 
generated  by  other  channels  is  an 
important  ROI  metric  that  can  help  a 
company  determine  how  online 
activities  stack  up  against  overall 
business  goals.  At  $10.7  billion  Staples 
Inc.  in  Framingham,  Mass.,  the  value 


of  a  customer  is  based  in  part  on  how 
many  channels  he  uses  to  buy  prod¬ 
ucts.  That  means  analyzing  sales 
generated  over  the  Web,  at  retail 
stores  and  from  the  catalog. 

“We  focus  on  integrating  sales  data 
across  all  our  channels  to  create  met¬ 
rics  that  refer  to  the  lifetime  value  of 
the  customer,”  says  Mike  Ragunas, 
chief  technology  officer  at  the  office 
supplies  retailer.  “We’ve  found  that  in 
terms  of  sales,  a  three-channel  shopper 
is  worth  4.5  times  that  of  a  retail-only 
shopper.” 

Two  Channels  Are  Better  Than  One 

Similarly,  St.  Petersburg,  Fla.-based 
HSN  LP,  a  $1.8  billion  multichannel  re¬ 
tailer  best  known  for  its  Home  Shop¬ 
ping  Network,  has  found  that  cus¬ 
tomers  who  shop  both  online  and  from 
television  spend  26%  more  than  those 
who  shop  through  a  single  channel. 

If  a  company  experiences  an  in¬ 
crease  in  Web  site  visitors  that  doesn’t 


result  in  increased  sales,  something  is 
wrong,  says  Eileen  Raphael,  manager 
of  Steelcase.com,  the  online  arm  of 
$3.9  billion  office  furniture  maker 
Steelcase  Inc.  in  Grand  Rapids,  Mich. 

After  launching  the  company’s  first 
Web  site  in  1995,  Raphael  watched  site 
traffic  double  every  year;  but  the  num¬ 
ber  of  sales  leads  didn’t  double. 

Steelcase  learned  from  customer 
feedback  that  visitors  to  the  site  were 
frustrated  by  its  design  and  felt  that  it 
didn’t  provide  enough  information  to 
place  orders.  “When  we  decided  to  re¬ 
launch,  we  were  getting  110,000  to 
120,000  visitors  per  month,  so  there 
was  a  tremendous  opportunity  to  build 
our  customer  base,”  Raphael  says. 

Now,  Steelcase  looks  at  both  revenue 
and  cost  savings  to  measure  the  ROI  of 
its  relaunched  Web  site.  For  example,  a 
salesperson  at  one  of  the  company’s 
800  outlets  might  earn  $75,000  per 
year.  If  Steelcase.com  can  provide 
product  information  without  getting  a 
salesperson  involved,  it  saves  an  hour 
of  the  salesperson’s  time,  or  about  $36. 

“If  we  can  save  one  hour  of  time  for 
a  dealer  salesperson  every  week,  that 
adds  up  to  millions  of  dollars  per  year 
in  people’s  time,”  says  Raphael. 

Countrywide  Credit  Industries  Inc., 


a  $2  billion  financial  services  company 
based  in  Calabasas,  Calif.,  is  also  see¬ 
ing  increased  sales  online  as  a  result  of 
a  Web  site  overhaul.  The  company  re¬ 
designed  its  site  two  years  ago  based 
on  customer  feedback  and  Web  site 
performance. 

Countrywide’s  IT  group  built  soft¬ 
ware  that  lets  the  company  track 
“events,”  such  as  how  many  people  fill 
out  loan  applications  online  and  how 
many  applications  result  in  loans.  To 
do  that,  Countrywide  had  to  integrate 
the  Web  site  with  back-end  databases 
and  enterprise  applications.  This 
process  also  lets  the  company  more 
easily  measure  Web  site  activity  in 
terms  of  its  overall  business  objectives, 
says  Larry  Gentry,  vice  president  of 
e-commerce. 

For  example,  Countrywide  now 
knows  that  its  Web  sites  account  for 
48%  of  overall  loan  funding,  up  from 
only  5%  two  years  ago. 

Also,  providing  services  such  as  elec¬ 
tronic  statements  and  online  rate  cal¬ 
culations  via  the  Web  site  has  yielded 
cost  savings.  Previously,  Countrywide 
provided  those  services  at  a  higher 
cost  via  mail  and  fax.  “The  immediate 
ROI  is  cost  reduction.  Now  that  we  put 
those  services  online,  customers  get 
the  information  sooner  and  we  get  the 
cost  savings,”  says  Gentry. 

The  bottom  line  is  that  instead  of 
poring  over  reams  of  data,  IT’s  time  is 
better  spent  developing  ROI  measures 
that  can  show  how  well  the  company’s 
Web  channel  is  performing  compared 
with  other  sales  channels,  says  Bill 
Gassman,  an  analyst  at  Gartner  Group 
Inc.  in  Stamford,  Conn.  I 


Webster  is  a  freelance  writer  in 
Providence,  R.I.,  who  frequently  covers 
technology.  Contact  him  at 
johnwebsterl@earthlink.net. 


Excuses,  Excuses 

Companies  say  they  don’t  calculate  ROI  because: 
■  It's  not  worth  the  effort.  44% 


■  They  lack  firm  data. 

■  Senior  management  doesn't  require  it. 

■  They  lack  necessary  financial  experience. 

■  It  takes  too  long. 

Base:  362  e-commerce  managers;  multiple  responses  allowed. 

SOURCE:  IDC,  FRAMINGHAM.  MASS  .  APRIL  2001 
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Ask  &  Answer 

Instead  of  looking  only  at  revenue  and 
site  visits  to  determine  Web  site 
ROI,  consider  the  following: 

Is  the  Web  site  creating  efficiencies  across  the  business 
that  you  didn’t  have  before? 

Do  you  provide  enough  information  online  to  cut  down  on 
the  number  of  calls  to  your  toll-free  number? 

Will  e-mail  marketing  save  money  on  direct  mail  costs? 


SOURCE:  THE  YANKEE  GROUP.  BOSTON 


You  see  a  voicemail 


waiting  on  your  laptop.  So  now  you  can  share  and  respond  to  information  however 


you  want.  It's  possible  when  Avaya  transforms  your  company's  voice  and  data  systems  by  getting  them  working  together. 


Reliably.  Securely.  With  our  innovations  in  voice  and  in-depth  expertise  in  data,  you  stay  accessible,  you  stay  connected. 


Find  out  why  more  than  90%  of  the  FORTUNE  500 *  use  Avaya  communications  to  power  their  business,  visit  avaya.com/nowtwo. 


AVAyA 

COMMUNICATION  WITHOUT  BOUNDARIES 
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"Revealing" 

"An  Industry  Stand  ard" 


BUSINESSCAREERS 


Dear  Career  Adviser: 


"Well  Researched" 


/////consulting 
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SALARY 

GUIDE 

Compiled  from  our  more  than  100  offices,  our  salary  data  is  up-to-date  and 
comprehensive.  Use  it  to  help  recruit  and  retain  the  best  technology  talent. 

Call  today  for  your  free  copy  or  visit  us  online  at  rhic.com.  Knowledge  is  power. 
Our  salary  guide  can  help  power  your  future. 

/////CONSULTING* 

Technology  Professionals 

A  Robert  Half  International  Company 

POWER  YOUR  FUTURE® 

rhic.com  •  800-793-5533 


I’m  a  Unix  application  developer  looking  for 
work.  Even  in  this  market ,  I  would  like  to  do 
something  interesting ,  and  I  have  thought 
about  working  on  the  new  Mac  OS  X.  Are 
companies  hiring  in  this  area? 

—  hunting  Hard 


Dear  Hunting: 

While  opinions  vary  regarding  how 
quickly  OS  X  development  experience 
will  get  you  new  work,  being  able  to 
work  across  multiple  operating  sys¬ 
tems  is  a  definite  plus.  “Interest  in  de¬ 
veloping  for  this  market  has  ratcheted 
up  significantly  now  vs.  even  six 
months  ago,”  says  Doug  Hill,  senior 
project  leader  at  Smart  Technologies 
Inc.,  a  developer  of  meeting  productiv¬ 
ity  technology  in  Calgary,  Alberta. 

That’s  partly  because 
Apple  Computer  Inc.  is 
now  shipping  machines 
with  OS  X  as  the  default 
operating  system.  Plus, 
there’s  a  native  version  of 
Microsoft  Office  that  runs 
on  OS  X,  not  to  mention 
better  documentation  to 
bolster  OS  X  application 
development. 

Getting  hired  for  OS  X 
development  work  is  pos¬ 
sible,  particularly  if  you 
have  a  Unix  or  Java  back¬ 
ground  and  want  to  devel¬ 
op  applications  for  mar¬ 
kets  such  as  education,  graphics,  video 
editing  or  games  or  work  on  hardware 
and  peripherals. 

Dear  Career  Adviser: 

I  recently  became  a  Cisco  Certified 
Network  Associate.  Other  than  this  cre¬ 
dential ,  I  have  little  to  no  formal  com¬ 
puter  training.  I  have  been  trying  to  get 
a  job  now  for  close  to  two  months,  but 
apparently  nobody  wants  someone  with 
no  experience,  even  though  I  aced  my 
Cisco  exam.  What  can  I  do? 

—  No  Takers 

Dear  No: 

In  today’s  world,  any  training  or  cer¬ 
tification  needs  to  be  backed  up  with 
work  experience.  If  you  can’t  find  a  job 
because  you  have  no  experience,  work 


as  an  apprentice,  even  if  it’s  in  your 
spare  time  for  no  pay  at  a  small  busi¬ 
ness  or  for  a  nonprofit  group.  That’s 
the  suggestion  of  Mark  Skvarna,  dep¬ 
uty  superintendent  of  Baldwin  Park 
Unified  School  District  in  Baldwin 
Park,  Calif.,  who  created  the  district’s 
Teaching  Technology  Program. 

41  Dear  Career  Adviser: 

After  spending  a  year  as  a  Cobol  pro¬ 
grammer  and  another  year 
as  a  help  desk  analyst,  I  re¬ 
cently  completed  a  program 
in  Web  design  at  a  tech 
school,  with  straight  A’s.  I 
know  HTML,  JavaScript, 
Photoshop,  Dreamweaver 
and  Flash,  and  I  want  to 
land  a  job  as  a  Web  design¬ 
er.  What  are  my  chances, 
particularly  in  Chicago? 

—  Newly  minted 

Dear  Minted: 

Although  you  have  a  re¬ 
cent  degree  as  a  Web  de¬ 
signer,  you’re  actually  a  day  late  and  a 
dollar  short  for  the  Chicago  graphics 
market,  says  Jeff  Pace,  president  of 
WebGroup  LLC,  a  recruiting  firm  with 
offices  in  Chicago  and  Detroit.  While 
your  Cobol  experience  could  be  benefi¬ 
cial  for  Web  development  because  of 
your  coding  and  structured  program¬ 
ming  background,  your  actual  experi¬ 
ence  is  lacking.  Plus,  if  you  go  after  Web 
designer  jobs,  you’re  competing  against 
more  experienced  creative  talent  who 
are  also  vying  for  Chicago  jobs. 

More  practical  approaches  would 
include  returning  to  help  desk  or  end- 
user  support  work  in  a  corporate  envi¬ 
ronment  or  doing  outsourced  call  cen¬ 
ter  support  for  a  vendor  and  then  trying 
to  move  up  within  the  company,  says 
Pace.  With  a  four-year  degree  in  this 
market,  you  might  earn  $30,000  per  year 
or  more  supporting  intricate  software.  I 


fs?an  quittel  is  an  expert 
in  high-tech  careers  and 
recruitment.  Send 
questions  to  her  at 
www.conipiiterworid.coFn/ 
career.adviser. 
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See  how  award-winning  IT  Leaders  HRP 
solve  real-world  issues  with: 

CRM 

Connecting  customer  systems  with  the  supply  chain  for  business  innovation 

ROI 

Best  practices  in  measuring  IT  project  results  and  aligning  with  senior 
management  goals 
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CONFERENCE 


Supplier  Management 

Mastering  the  art  of  negotiating  and  creating  true  partnerships  with  vendors, 
outsourcers,  and  service  providers 


March  3-5, 2002 
Marriott  Desert  Springs 
Palm  Desert 
California 


Infrastructure  Strategies 

Maximizing  data  management,  networks,  storage  and  wireless  technologies 


Creating  value  with  existing  IT  architectures,  Windows  migration  and  Web-based  technologies 

Security 
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How  much  is  really  enough?  Calibrating  security  needs  against  budget  realities 
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SO  RELIABLE, 
IT’S  THE 

LEADING 

DATABASE 

IN  HEALTHCARE 


More  hospitals  around  the  world  are  running 
their  "life-or-death"  applications  on  Cache 
than  on  any  other  database  system. 

With  proven  reliability  like  this,  you  should 
consider  Cache  for  your  critical  applications. 

With  its  lightning  speed  and  massive  scalability, 
the  performance  of  Cache  makes  it  a  perfect 
match  for  any  enterprise,  in  any  industry,  with  a 
requirement  for  fast  transaction-processing 
applications  capable  of  scaling  to  tens  of 
thousands  of  users. 

Cache  uniquely  combines  robust  object  and 
relational  technologies,  coupled  to  a  multi¬ 
dimensional  data  engine.  Plus,  it  includes  a  rapid 
Web  application  development  environment. 

Cache  is  backed  by  24x7  support  from 
InterSystems  -  a  leader  in  high  performance 
databases  for  23  years,  with  4,000,000  users* 
worldwide  in  healthcare,  financial  services  and 
other  industries. 

InterSystems  f 

E  CACHE 

Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com 

*  InterSystems'  database  technology  is  used  by  Ameritrade,  Hitachi,  Johns  Hopkins,  Kennedy  Space  Center, 
Pepsi  Cola,  Prudential  Insurance  Co.,  Shell,  U.S.  Army,  World  Bank  and  other  successful  enterprises. 

©  2001  InterSystems  Corporation  All  rights  reserved  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.  Other  product  names  are  trademarks  of  their  respective  vendors.33-2 


THIS  WEEK 


THIN  IS  IN 

There  are  a  number  of  reasons  for 
IT  to  move  to  server-based  appli¬ 
cations  feeding  thin-client  systems. 
They  can  reduce  equipment  main¬ 
tenance  and  upgrade  costs,  provide 
fewer  end-user  problems  and  offer 
better  control  over  applications 
and  data.  PAGE  40 


AGILE  AND  VERSATILE 


A  new  breed  of  “lightweight”  pro¬ 
gramming  systems,  such  as  ex¬ 
treme  programming,  emphasizes 
rapid  iteration  and  interaction  with 
users.  Such  systems  are  proving  to 
be  effective  for  smaller,  faster  proj¬ 
ects.  PAGE  42 


QUICKSTUDY 

PHP  is  an  open-source  language 
designed  for  creating  Web  applica¬ 
tions.  Devotees  say  it’s  exceptional¬ 
ly  easy  to  learn  and  use,  and  one 
corporate  IT  manager  says  it  has 
helped  cut  his  IT  costs  sixfold. 

Find  out  more  in  this  week’s 
primer.  PAGE  46 


SECURITY  JOURNAL 

From  newly  discovered  router  vul¬ 
nerabilities  to  viruses  traveling  in 
on  Secure  Sockets  Layer  sessions, 
Vince  Tuesday  has  his  hands  full  in 
the  new  year.  This  means  that 
long-range  planning  moves  to  the 
back  burner.  PAOE  48 


NICHOLAS  PETRELEY 


Baseball  Cap  Linux 


AT  THE  TIME  OF  THIS  WRITING,  rumors  are  flying  that  AOL 
Time  Warner  may  purchase  Red  Hat  Inc.  I’ve  read  many  opin¬ 
ions  and  speculations  on  the  motives  behind  such  a  move,  but 
nobody  seems  to  know  yet  why  AOL  Time  Warner  would  be 
interested  in  Red  Hat.  I  know  at  least  one  reason:  AOL  Time 
Warner  should  buy  Red  Hat  to  make  its  version  of  Linux  the  basis  for  an 
inexpensive  all-purpose  home  console. 


Like  Microsoft,  AOL  Time  Warner  would  have  to 
take  a  loss  on  every  box.  But  the  company  could 
make  up  for  the  loss  in  monthly  access  fees,  not  to 
mention  royalties  on  the  game  and  other  software  de¬ 
veloper  kit  licenses.  AOL  Time  Warner  customers 
would  upgrade  in  a  minute  if  they  thought  it  meant 
using  its  software  on  a  box  that  doesn’t  crash  all  the 
time.  Throw  in  Star  Office  and  a  few  other  goodies, 
and  it  could  make  most  home  computers  obsolete. 

Assuming  this  is  what  AOL  Time  Warner  is  after, 
then  I  can  see  why  Red  Hat  is  the  ideal  target.  AOL 
users  don’t  strike  me  as  the  kind  of  people  who  know 
or  care  much  about  Linux.  If  they  have  heard  of  Lin¬ 
ux  at  all,  it’s  probably  because  they’ve  heard  of  Red 
Hat.  So  while  the  public  relations  benefits  may  be 
very  small,  AOL  Time  Warner  would  get  more  public 
relations  brownie  points  from  Red  Hat  than  from  any 
other  Linux  distribution. 

Red  Hat  Linux  is  also  the  top  pick  because  it  has 
weathered  the  recession  better  than  any  other  distri¬ 
bution.  This  allowed  Red  Hat  to  keep  much  of  its 
original  talent  intact,  while  other  companies  have 
had  to  lay  off  some  of  their  best  and  brightest. 

A  Red  Hat  purchase  would  also  make  it  less  likely 
that  the  open-source  community  would  protest  AOL 
Time  Warner’s  entrance  into  the  Linux  market.  Not 
everyone  likes  Red  Hat,  but  most  people  agree  that 
it’s  dead  serious  about  keeping  the  open- 
source  model  pure.  As  long  as  the 
purchase  doesn’t  precipitate  an  employee 
exodus  from  Red  Hat,  the  open-source 
community  isn’t  likely  to  assume  that  AOL 
Time  Warner  will  try  to  poison  Red  Hat 
Linux  with  proprietary  extensions.  Con¬ 
sidering  the  state  of  the  economy,  AOL 
Time  Warner  can  be  reasonably  confident 
that  there  won’t  be  an  exodus  unless  it  re¬ 
ally  botches  the  transition. 

The  worst-case  scenario  is  that  AOL 
Time  Warner  would  cause  Red  Hat  to 
stagnate  and  fade  into  irrelevance.  So 


what?  Linux  will  live  on  even  if  the  company  kills 
Red  Hat  outright.  Red  Hat  Linux  is  just  a  collection 
of  open-source  code  that  anyone  can  modify,  improve 
and  sell.  So  plenty  of  commercial  Linux  distributors 
(not  to  mention  Linux  advocates  such  as  IBM)  could 
leverage  Red  Hat’s  existing  market  share  and  code 
base  by  repackaging  and  selling  an  improved  version 
of  Red  Hat  under  another  name.  MandrakeSoft  and 
Caldera  built  their  businesses  on  that  model  and  fal¬ 
tered  only  after  they  strayed  too  far  from  it. 

Here’s  why  IT  people  should  hope  AOL  Time 
Warner  is  planning  to  build  an  appliance  and  that  it 
succeeds:  It  would  be  a  grand  proof  of  concept  for 
Linux  as  a  platform  for  the  average  Joe.  It  would  turn 
Red  Hat  Linux  into  Baseball  Cap  Linux,  if  you  will. 

If  AOL  Time  Warner  customers  began  to  replace 
their  PCs  with  AOL  Time  Warner  appliances,  they 
may  not  know  or  care  that  they’re  running  Linux.  But 
you  can  bet  savvy  IT  administrators  would  notice. 
These  AOL  Time  Warner  boxes  would  prove  that 
Linux  has  all  the  frills  of  Windows  minus  the  crashes 
and  cost.  After  that,  it’s  a  no-brainer  to  deploy  similar 
desktop  appliances  at  work  in  order  to  save  bundles 
of  cash.  And  if  AOL  Time  Warner  doesn’t  want  to  cre¬ 
ate  such  appliances,  I’m  sure  IBM  and  others  would. 

Once  Linux  started  to  penetrate  the  desktop,  there 
would  be  no  stopping  it.  The  reason  is  security.  It’s 
far  easier  to  secure  a  Linux  or  any  Unix- 
based  system  against  intruders,  viruses 
and  Trojan  horses  than  it  is  to  secure  a 
Windows  box.  I’ve  heard  from  many  read¬ 
ers  who  decided  to  adopt  Linux  for  this 
reason  and  are  glad  they  did.  But  not  near¬ 
ly  enough  people  have  expended  the  effort 
to  see  that  Linux  is  easier  to  secure  than 
Windows. 

If  AOL  Time  Warner  makes  Linux  main¬ 
stream,  more  people  could  Finally  find  out 
for  themselves.  And  for  anyone  who  has 
been  hit  with  the  Melissa  or  I  Love  You 
viruses,  there  would  be  no  turning  back.  I 
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Overview 

Many  enterprises  are  movmg  away  from 
PCs  to  server-based  applications  feeding 
HHHt  systems.  Compared  with  desk¬ 
top  PC  systems,  modern  thin-client  soft¬ 
ware  can  reduce  equipment  maintenance 
and  upgrade  H^9itroduce  fewer  end- 
user  problems  and  offer  better  control  of 
aPiflBlBrnc*  data.  Thin-client  systems 
provide  fast  access  tHWindows  applica¬ 
tions  over  low-bandwidtftonnections.  But 
there  are  drawbacks:  You  need  bigger, 
more  sophisticated  back-eH  servers,  and 
more  users  are  affected  by  network  out¬ 
ages.  Moreover,  thin  clients  won’t  do  for 
H|H|intensive  or  graphics-intensive 
applications,  and  there’s  nloff-line  access. 

By  Robert  L.  Mitchell 


call  it  thin-client,  server- 
centric  computing  or  virtual  user 
interface  software.  Products  like 
Citrix  Systems  Inc.’s  MetaFrame, 
Microsoft  Corp.’s  Terminal  Ser¬ 
vices  and  Tarantella  Inc.’s  Taran¬ 
tella  Enterprise,  traditionally  found 
in  corporate  settings,  send  only  user  interface  and 
keystroke  data  between  client  and  back-end  systems. 

Using  proprietary  protocols,  these  products  offer 
faster  access  to  back-office  applications  on  low- 
bandwidth  wide-area  networks  while  reducing  infra¬ 
structure  and  administration  costs.  So  far,  IT  depart¬ 
ments  have  been  reluctant  to  deploy  this 
technology  to  internal  LAN  clients  or  to  a 
wider  range  of  applications,  but  that 
could  change  as  thin-client  systems  be¬ 
come  more  attractive  for  enterprise  use. 

The  newest  systems  make  client  soft¬ 
ware  a  standard  browser  plug-in,  extend¬ 
ing  the  hardware  that’s  supported.  On  the 
back  end,  administrators  can  configure 
the  systems  to  let  users  access  applica¬ 
tions  though  an  intranet  Web  page.  Thin- 


client  software  sports  sophisticated  load-balancing 
features  to  optimize  back-end  server  performance. 
Server  farms  can  span  data  centers,  allowing  unin¬ 
terrupted  computing  during  a  system  upgrade  or 
a  catastrophic  failure.  Most  systems  now  support 
Secure  Sockets  Layer  encryption. 

But  thin  clients  don’t  fit  every  situation.  They 
can’t  support  high-end  graphics  applications,  and 
power  users  may  need  their  own  desktop  systems. 

Companies  with  thin-client  systems  can  save  mon¬ 
ey  by  avoiding  PC  upgrades,  but  that’s  just  part  of 
potential  savings,  says  Dan  Kusnetsky,  an  analyst  at 
IDC  in  Framingham,  Mass.  In  a  typical  computing 

implementation,  “staffing  is  50%  to  75%  of 
the  three-year  cost,”  he  says.  Such  savings 
can  more  than  off-set  increased  costs  of 
servers  and  software,  Kusnetsky  says. 

John  Bolz,  systems  architect  at  Wells 
Fargo  &  Co.  in  San  Francisco,  agrees  but 
says  it’s  hard  to  get  top  management  to  see 
beyond  initial  costs:  “You  can  talk  [total 
cost  of  ownership]  till  the  cows  come  home, 
but  the  cost  of  deploying  servers  appears 
to  a  lot  of  eyes  as  a  significant  expense.” 


TECH  CHECK 

THIN-CLIENT 

COMPUTING 


S497M  Total  virtual 

user  Interface  software 
sold  in  2000 


77.4%  Percentage 

of  virtual  user  interface 
software  sold  for  Win¬ 
dows  operating  systems 


WORLD  FOOD  PROGRAM,  ROME 

Feeding  OIF 
The  System 

WHO  THEY  ARE:  A  United  Nations 
agency  delivering  food  to  underdevel¬ 
oped  areas 


GOAL:  Let  relief  workers  in  Pakistan 
and  other  countries  access  its  ERP  sys¬ 
tem  in  Rome  to  directly  coordinate  food 
shipments. 

CHALLENGE:  The  system  must  work 
in  areas  with  poor  connections  or  over 
VSAT  links,  and  with  no  local  support. 

STRATEGY:  Install  MetaFrame  XP  on 
Windows  2000  servers  in  Rome  for 
access  to  an  SAP  AG  system;  install  a 
browser-based  client  on  thin-client  de¬ 
vices  and  ship  them  to  remote  locations. 

COMMENTS:  In  places  like  Islamabad, 
where  the  World  Food  Program  opened 


an  office  in  November  2001  to  coordinate 
Afghanistan  relief  efforts,  “connectivity  is 
a  challenge,  and  support  for  complex  ap¬ 
plications  is  difficult  to  achieve,"  says  Ole 
Oftedal,  acting  chief  of  the  systems  group. 


ISSUES:  World  Food  Program  CIO  Ken 
Herman  likes  Citrix  Systems  Inc.’s  Meta¬ 
Frame  enough  to  deploy  30  Wyse  Tech¬ 
nology  Inc.  Windows  thin  terminals  at 
headquarters  for  SAP  training,  which  he 
says  cost  75%  less  than  PCs.  But  the 
600  PCs  at  headquarters  still  run  the 
standard  SAP  client.  “As  CIO,  it’s  not 
clear  to  me  that  I’ll  replace  traditional 
desktops,  given  that  you  have  to  scale 
the  back  end  so  high,"  he  says. 


PAYOFF:  After  receiving  preconfigured 
thin-client  PCs  and  basic  instructions, 
users  were  able  to  access  the  ERP  sys¬ 
tem  in  Rome.  “We  got  the  Pakistan  op¬ 
eration  up  and  running  in  two  hours,” 
says  Oftedal.  The  systems  are  easily  re¬ 
configured  to  use  a  backup  VSAT  con¬ 
nection,  although  latency  created  some 
connection  problems.  The  World  Food 
Program  has  since  rolled  out  the  system 
to  300  users  in  29  other  countries. 


HEADQUARTERS, 

ROME 


FIELD  OFFICE, 
PAKISTAN 


How  the  World  Food 
Program  Delivers  the  Goods 


VSAT  SATELLITE 
OR  DIAL-UP  INTERNET 


Workers  in  remote  field  offices  connect 
to  the  agency’s  ERP  system  using  a 
browser-based  Citrix  thin  client  that  can 
run  efficiently  over  the  low-bandwidth 
connections  provided  by  its  dial-up  ISP  or 
satellite  services.  The  system  handles 
poor-quality  dial-up  connections  well, 
officials  say,  but  latency  issues  over 
satellite  links  have  been  a  problem. 


DIAL-UP 
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Thin  Clients  for 
Tough  Times 

Excerpts  from  a  conversation  with  Steve 
RIimIB  Kaplan,  a  vice  president  and  general  manager 
at  Houston-based  Citrix  reseller  Vector  ESP 
Inc.  and  co-author  of  the  book  Citrix  Meta  frame  for 
Windows  Terminal  Services:  The  Official  Guide  (Mc- 
Graw  Hill.  2000). 

Is  if  time  to  reconsider  thin-client  computing  for 
its  economic  benefits?  This  is  the  way  to  deploy  Win¬ 
dows  2000  without  touching  the  PCs.  One  thing  that 
people  usually  miss  is  they  don’t  think  about  the  remote 
offices  and  how  they’re  going  to  be  able  to  eliminate  the 
infrastructure  out  there. 

What’s  the  most  common  mistake  made  when 
assessing  the  business  benefits  of  thin-client 
computing?  Putting  in  this  infrastructure  but  then  only 
using  it  for  a  couple  of  applications.  If  you’re  going  to  do 
it,  do  it  for  the  whole  desktop.  Sure,  you  can  make  ex¬ 
ceptions,  but  for  the  most  part,  go  thin  client  everywhere. 

What’s  holding  back  wider  adoption  of  thin- 
client  computing?  I  think  it’s  people  who  rise  up 
through  IT  decision-making  because  of  an  ability  to 
manage  perceived  risk.  And  the  most  scary  thing  to  a 
CIO  is  thousands  of  users  screaming  at  them.  It’s  fear. 
It’s  job  security. 


Is  Thin  Client  Enterprise-Ready? 

I1M 


RECENT  IMPROVEMENTS 
in  thin-client  software 
were  enough  to  convince 
Wells  Fargo  &  Co.  to  buy  a  10,000-user 
license  for  Citrix  Systems  Inc.’s  Meta- 
Frame  XP.  “We  are  geographically  dis¬ 
persed,  and  keeping  servers  and  worksta¬ 
tions  up  to  date  is  becoming  a  very  ex¬ 
pensive  proposition,”  says  John  Bolz,  vice 
president  and  systems  architect  at  Wells 
Fargo  in  San  Francisco. 

Ole  Oftedal,  the  World  Food  Program’s 
acting  chief  of  the  systems  group,  is  deploying  thin 
clients  at  more  than  300  locations  worldwide  and 
considers  thin-client  systems  a  perfect  fit  for  com¬ 
plex  enterprise  applications  like  SAP. 

“[SAP  is]  a  dirty  application,  from  a  systems  point 
of  view,”  he  says.  “It’s  tough  to  maintain  and  diffi¬ 
cult  to  deploy  over  a  wide-area  network.”  Oftedal 
rejected  a  Web-enabled  version  of  SAP  because  it 
offered  fewer  features  and  a  different  user  interface. 

But  application  integration  can  also  be  tricky. 

Bob  Garrett,  CIO  at  Cal  Farley’s  Boys  Ranch  &  Af¬ 
filiates  in  Amarillo,  Texas,  avoided  upgrading  hun¬ 
dreds  of  Pentium  PCs  when  deploying  Microsoft 
Corp.’s  eEnterprise  enterprise  resource  planning 
application  by  installing  MetaFrame.  But  “there 
were  a  lot  of  fine-tuning  issues  in  getting  eEnter¬ 
prise  to  work  with  Citrix,”  he  says. 

Another  question  is  whether  thin-client  vendors 


FACTORS  TO 
CONSIDER 

Enhancements  in 
Windows  thin-client 
software  scalability 

Better  server  load 
balancing 

Fault-tolerant 
designs  that  allow 
servers  to  span  mul¬ 
tiple  data  centers 


can  support  large  installations.  “Scalabili¬ 
ty  is  an  issue,”  says  Peter  Lowber,  an  ana¬ 
lyst  at  Gartner  Inc.  in  Stamford,  Conn. 
“The  biggest  I’ve  seen  is  10,000  users.” 

The  largest  configuration  Citrix  has 
tested  included  250  MetaFrame  servers, 
says  senior  product  marketing  manager 
Richard  Whitehead. 

But  Bolz  says  he’s  confident  enough  of 
Citrix’s  scalability  on  Windows  2000  to 
push  ahead.  “We’re  also  looking  at  deploy¬ 
ing  in  retail  branches.  That’s  about  30,000 
servers  right  there,”  he  says.  That  would  make  Wells 
Fargo  one  of  Citrix’s  largest  customers  —  a  distinc¬ 
tion  that  makes  Bolz  a  bit  uneasy.  With  the  possible 
exception  of  Microsoft,  most  thin-client  vendors 
lack  experience  serving  enterprise  customers. 

Even  Citrix,  which  Framingham,  Mass.-based 
IDC  estimates  owns  about  77%  of  the  Windows 
thin-client  market,  “doesn’t  understand  the  enter¬ 
prise  model,”  Bolz  says.  “They  didn’t  understand 
why  we  would  get  upset  if  they  didn’t  resolve  a 
problem  in  a  short  period  of  time,”  although  that’s 
starting  to  change,  he  notes. 

ONLINE  EXCLUSIVE:  Got  Windows  and  Unix?  See  how  users 
/^v  •  -i  are  deploying  Tarantella  thin  clients,  read  an 

(/UTCjK  on'ine  Q&A  about  the  future  of  X  Window,  and 
review  our  product  feature  comparison  chart  at: 

1  Jl  lKlit  www.computerworld.com/q7a1540 


WELLS  FARGO  &  CO.,  SAN  FRANCISCO 

Big  Bank, 

Slim  Software 

WHO  THEY  ARE:  A  commercial  bank 


GOAL:  Eliminate  branch-office  servers  and  use 
thin-client  technology  to  deliver  line-of-business 
applications. 


CHALLENGE:  Branches  connect  via  low- 
bandwidth  128K  bit/sec.  connections. 


STRATEGY:  Use  Internet  Explorer  and  a  plug-in 
from  Citrix  Systems  Inc.  to  let  users  connect  to  a 
MetaFrame  front-end  intranet  Web  server.  Give 
each  user  a  personalized  application  Web  page 
based  on  his  Active  Directory  profile. 


COMMENT:  Wells  Fargo  tested  Windows  2000 
Terminal  Services  and  Tarantella  before  settling 
on  MetaFrame,  which  needed  a  connection  of 
about  21K  bit/sec.  The  bank’s  MetaFrame  server 
farm  spans  data  centers  in  three  states.  Until  the 
release  of  MetaFrame  XP,  Citrix  server  farms  were 
limited  to  a  single  subnet.  Now,  if  a  data  center 
goes  down,  users  are  automatically  rerouted. 


Data  centers  use  rack-mounted  Compaq 
Computer  Corp.  DL360  dual-processor  1U  serv¬ 
er  blades  (1U  equals  1.75  in.)  and  Cisco  6500 
switches  for  load  balancing.  “We  find  this  more 
effective  than  a  four-way  or  eight-way  box,"  says 
systems  architect  John  Bolz.  “We’ve  architected 
it  differently  than  most,  but  if  a  server  fails,  it’s 
relatively  easy  to  pull  that  blade  out  and  rebuild 
the  server  with  a  scripted  install." 


ISSUES:  Retail  bank  users  need  both  Win¬ 
dows-  and  Unix-based  applications.  Citrix’s 
MetaFrame  for  Unix  would  require  an  additional 
set  of  server  and  client  licenses.  This  means 
that  Wells  Fargo  would  have  to  pay  for  both 
Windows  2000  Server  and  Citrix  Windows 
client  access  licenses  for  every  user. 

Tarantella  gives  access  to  both  platforms 
without  extra  licenses.  But  “Tarantella  wouldn’t 
let  us  use  the  architecture  we  put  together  with 
Terminal  Services,"  he  says. 


PAYOFF:  More  than  7,000  users  now  use  line- 
of-business  applications  via  MetaFrame.  Wells 
Fargo  plans  to  convert  all  of  its  retail  banking 
group  to  thin  clients.  Eliminating  branch-office 
servers,  desktop-related  software,  and  system 
monitoring  and  remote  control  software  should 
cut  the  total  cost  of  ownership  by  75%. 


ABM  INDUSTRIES  INC.,  SAN  FRANCISCO 

Cleaning  Up 
Remote  Sites 

WHO  THEY  ARE:  A  $1.8  billion  provider  of  jan¬ 
itorial,  air  conditioning  and  security  services 


GOAL:  Avoid  replacing  more  than  1,700  PCs 
and  adding  servers  in  170  remote  offices  to 
accommodate  the  client  and  server  require¬ 
ments  of  a  new  ERP  application  from  J.D. 
Edwards  &  Co. 


CHALLENGE:  The  ERP  client  software  couldn’t 
run  locally  without  replacing  the  client  hardware 
and  operating  system.  Anthony  Lackey,  vice  pres¬ 
ident  and  chief  technology  officer,  also  wanted  to 
shorten  the  yearlong  process  required  to  update 
all  clients  with  new  versions  of  a  custom  applica¬ 
tion  that  tracks  maintenance  activity,  and  he 
wanted  to  expand  access  to  corporate  e-mail. 


STRATEGY:  Use  thin-client  technology;  replace 
PCs  with  Windows  terminals;  move  client  appli¬ 
cations  to  MetaFrame  1.8;  co-locate  MetaFrame 
servers  at  an  AT&T  Corp.  data  center,  with  a 
Comdisco  Inc.  hot  site  for  emergency  fail-over. 


COMMENT:  “We’re  a  very  small  MIS  operation, 
and  when  you  look  at  having  fairly  sophisticated 
mission-critical  equipment  in  170  offices  across 
the  country,  it  almost  spelled  doom,"  says  Lackey. 


ISSUES:  Lackey  hopes  an  upcoming  migration 
to  Citrix  Systems  Inc.’s  MetaFrame  XP,  with  a 
new  universal  printer  driver,  will  solve  a  printer 
compatibility  issue,  as  well  as  problems  with 
MetaFrame’s  Resource  Management  System, 
which  manages  user  activity.  Most  users  have 
one  or  two  applications,  but  with  40  to  50  appli¬ 
cations  and  more  than  2,200  concurrent  users 
at  peak  load,  “it’s  not  prepared  to  handle  the 
volume  of  data  we’re  pumping  into  it,”  says 
Lackey.  To  solve  that  problem,  he  archives  the 
data  every  30  days. 


PAYOFF:  Lackey  estimates  the  cost  per  user  per 
month  at  $112,  vs.  $280  for  a  traditional  LAN  con¬ 
figuration.  The  J.D.  Edwards  system  is  still  in  de¬ 
velopment,  but  the  technology  allowed  a  rollout  of 
Lotus  Notes  5.0  to  3,000  users  in  a  single  week¬ 
end.  More  than  3,000  users  can  access  ERP. 
Notes  and  other  applications  from  Windows  ter¬ 
minals  and  desktop  PCs.  “Our  user  population  has 
gone  up  25%  in  one  year  because  [there’s  no] 
barrier  of  entry  to  a  new  user.  We  just  ship  them  a 
terminal,  and  they  plug  it  into  the  wall,"  he  says. 
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ens  coldewey  is  an  application  devel¬ 
opment  troubleshooter.  When  he  comes 
onto  a  project,  it’s  usually  engulfed  in 
trouble.  By  that  point,  management  is 
often  so  desperate  that  it’s  willing  to  try 
almost  anything.  That’s  when  Coldewey, 
a  Munich,  Germany-based  independent 
consultant  specializing  in  banking  and  financial  ser¬ 
vices,  turns  to  Crystal,  one  of  the  new  agile  develop¬ 
ment  methodologies. 

Agile  is  the  label  given  to  a  growing  number  of 
methodologies  with  names  like  Scrum,  Crystal,  Adap¬ 
tive,  Feature-Driven  Development  and  Dynamic  Sys¬ 
tems  Development  Method  (DSDM).  These  new  de¬ 
velopment  approaches  are  based  on  the  premise  that 
if  you  hire  competent  developers,  presumably  they 
know  how  to  write  code.  Any  problems  your  devel¬ 
opers  encounter,  therefore,  aren’t  coding  issues  but 
organizational  and  communications  ones,  and  those 
are  what  the  agile  approaches  attempt  to  address. 

Coldewey,  for  example,  once  jumped  into  a  project 
that  was  on  the  verge  of  collapse.  The  team  was  de¬ 
veloping  a  complex  enterprisewide  system  at  a  bank 
and  was  under  extreme  pressure  to  show  results  fast. 
In  keeping  with  the  Crystal  approach,  Coldewey 
spirited  away  the  development  team  to  a  remote  site. 
“I  told  them  that  the  way  they  work  would  be  up  to 
them.  We  would  develop  the  process  together,”  he  re¬ 
calls.  This  alone  was  a  radical  departure  for  the  bank. 

Then  Coldewey  handed  out  two  sets  of  blank  index 
cards,  each  set  a  different  color.  On  one  set  he  in¬ 
structed  the  developers  to  write  down  the  things  they 
did  in  the  past  that  speeded  up  development.  On  the 
other,  they  wrote  things  that  slowed  them  down. 

“In  half  an  hour,  we  had  a  lot  of  cards  of  both  col¬ 
ors,”  he  says. 


Continued  on  page  44 


Extremely  Agile 
Programming 

These  new  programming  methodologies  are  called  adaptive  because 
they  react  to  changing  user  input,  agile  for  their  frequent  iterations  and 
continual  testing,  andlightweignt  because  they  emphasize  small  teams 
and  downplay  documentation.  By  Alan  Radding 
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After  sorting  through  the  cards,  they  quickly  set  up 
a  process  consisting  only  of  things  that  sped  develop¬ 
ment  while  avoiding  the  things  that  slowed  people 
down.  They  followed  the  process  they  had  just  set  up 
to  knock  out  the  first  iteration  of  the  system  within  a 
few  weeks  and  met  the  deadline. 

“We  went  through  this  exercise  and  made  changes 
for  every  iteration  until  we  had  a  stable  process,” 
which  took  about  three  iterations,  Coldewey  says. 

Although  the  various  agile  approaches  are  differ¬ 
ent,  they  have  some  things  in  common.  They’re  in¬ 
tended  to  produce  software  that  can  be  changed 
quickly,  and  all  specify  short  iterations  and  maximize 
the  amount  of  time  spent  face  to  face.  They  also  fo¬ 
cus  on  team  morale.  “You  can’t  talk  about  agile 
methodologies  without  talking  about  team  morale,” 
says  Alistair  Cockburn,  the  originator  of  Crystal. 

The  agile  approaches  differ  from  extreme  pro¬ 
gramming  (XP),  although  all  of  them  are  lightweight 
methodologies.  Lightweight  methodologies  dispense 
with  much  of  the  software  development  process 
overhead  that  bogs  down  developers,  such  as  lengthy 
requirements  definitions  and  exten¬ 
sive  documentation.  XP,  however, 
differs  from  the  agile  approaches  by 
being  much  more  prescriptive,  even 
dogmatic,  some  might  say  [Quick- 
Study,  Dec.  3].  XP  revolves  around  12 
practices  identified  by  Kent  Beck, 
author  of  Extreme  Programming  Ex¬ 
plained:  Embrace  Change  (Addison 
Wesley  Longman  Inc.,  1999). 

Although  XP  in  various  forms  has 
been  around  for  several  years,  cor¬ 
porate  IT  is  only  just  beginning  to 
consider  it.  The  chief  obstacle  is  that 
some  practices  prescribed  by  XP 
contradict  long-established  IT  poli¬ 
cy.  For  example,  XP  specifies  pair 
programming,  in  which  two  pro¬ 
grammers  sit  side  by  side  coding  at  a 
single  workstation.  Pair  program¬ 
ming  seems  blatantly  inefficient,  but 
a  series  of  studies  has  confirmed 
that  the  approach  results  in  fewer 
code  defects,  which  ultimately  speeds  final  delivery. 

“Pair  programming  is  not  as  productive  initially, 
but  the  design  happens  on  the  fly  and  the  quality  is 
outstanding.  And  since  we  have  fewer  defects,  we’re 
not  spending  time  doing  as  much  bug  fixing.  So  the 
cost  issue  is  moot,”  says  one  application  develop¬ 
ment  manager  at  a  major  U.S.  bank. 

XP  also  requires  the  customer  for  whom  the  soft¬ 
ware  is  being  written  to  take  an  active,  ongoing  role 
in  the  development  process  —  to  the  extent  that  the 
customer  is  asked  to  write  a  test  to  prove  a  requested 
function  before  it’s  actually  coded.  In  XP,  customers 
write  desired  functions  on  index  cards  (one  function 
per  card).  The  developers  estimate  how  long  it  will 
take  to  code  that  function.  Based  on  the  estimates, 
the  customer  decides  which  functions  to  tackle  first. 
Then  the  customer  writes  a  test,  and  the  developers 
write  code  to  pass  the  test.  This  requires  a  serious 
commitment  on  the  part  of  the  customer,  but  in  re¬ 
turn,  the  customer  gets  exactly  what  he  asked  for. 

XP’s  approach  to  requirements  alone  saves 


tremendous  effort.  “We’re  talking  about  a  bunch  of 
index  cards  vs.  100-plus-page  requirements  docu¬ 
ments,”  says  the  bank  manager.  The  bank  turned  to 
XP  to  develop  a  major  enterprise  document  fulfill¬ 
ment  system.  When  a  bank  client  opens  an  account, 
the  new  system  automatically  generates  all  the  ap¬ 
propriate  documents  and  sends  them  to  the  client.  In 
addition  to  the  document  fulfillment  system,  the 
bank  has  about  10  applications  or  reusable  compo¬ 
nents  built  using  XP  techniques. 

XP  isn’t  perfect,  however,  and  the  bank  has  looked 
at  other  agile  approaches.  “XP  doesn’t  address  de¬ 
ployment,”  says  the  bank  manager.  So  now  he’s  look¬ 
ing  at  DSDM,  “which  has  some  life-cycle  project 
management,”  he  notes. 

Lightweight  Programming  for  Heavyweights 

Lante  Corp.,  a  Chicago-based  consulting  company, 
recently  held  a  conference  on  XP  for  its  corporate 
clients  in  hopes  of  speeding  its  acceptance.  To  make 
XP  more  palatable  to  corporate  managers,  Lante  has 
teamed  with  Beck  to  create  what  they’re  calling  a 
one-team  approach,  explains  David  Trowbridge, 

Lante’s  director  of  technology.  The 
one-team  approach  combines  an 
XP  development  effort  with  an  ROI 
team  that  analyzes  the  business 
and  ranks  project  requirements  on 
the  basis  of  return  on  investment. 

Lightweight  methodologies  have 
been  adopted  primarily  by  inde¬ 
pendent  software  vendors  and  In¬ 
ternet  start-ups  that  don’t  have  an 
entrenched  development  process. 
These  approaches  work  best  on 
projects  where  requirements 
change  quickly  and  frequently  or 
aren’t  fully  apparent  at  the  start. 

Lante,  which  offers  a  range  of  de¬ 
velopment  approaches,  from  tradi¬ 
tional  to  agile,  only  recently  found 
a  major  corporate  client  willing  to 
try  XP. 

Similarly,  Jim  Highsmith,  creator 
of  Adaptive,  an  agile  methodology, 
has  started  to  work  with  a  major 
pharmaceutical  company.  “They  are  kicking  the  tires. 
A  few  companies  are  using  it  on  Internet  projects, 
but  it  represents  a  big  change  for  corporate  IT,” 
Highsmith  notes. 

A  move  to  agile  programming,  in  fact,  strikes  the 
most  sensitive  of  nerves:  honest  communication.  For 
years,  corporate  IT  and  users  have  worked  separate¬ 
ly.  Lightweight  methodologies  bring  everyone  to¬ 
gether  face  to  face  and  keep  them  there. 

“Now  they  have  to  be  honest,”  says  Beck,  who  set 
up  the  showcase  corporate  XP  project  at  the  auto¬ 
maker  Chrysler  several  years  ago.  “No  more  padding 
requirements  or  inflating  estimates.”  In  exchange  for 
honesty,  organizations  get  functionality  they  need 
fast.  To  managers,  it’s  a  welcome  trade-off.  I 


Radding  is  a  freelance  writer  in  Newton,  Mass. 

Thinking  about  using  one  of  the  agile  methodologies? 
Check  out  some  tips  available  on  our  Web  site  from 
Martin  Fowler's  “The  New  Methodology." 

www.computerworld.com/q725493 


JUST  THE  FACTS 


Agile  or 
Nonagile? 

Is  your  organization  a  good  candidate 
for  using  one  of  the  agile  programming 
methodologies?  The  answer  may  be 
yes,  if  you  have: 

■  Uncertain  or  volatile  requirements 

■  Responsible  and  motivated  developers 

■  A  customer  who  understands  and 
will  get  involved 

On  the  other  hand,  more  traditional, 
predictive  approaches  are  indicated 
if  your  project  involves: 

■  More  than  50  developers 

■  A  fixed-price  or  fixed-scope  contract 

SOURCE:  MARTIN  FOWLER.  “THE  NEW 
METHODOLOGY."  WWW.MARTINFOWLER.COM 


For  more  on  agile  programming  in  general  see  the 
Agile  Manifesto  at  www.agilealliance.com  and 
“The  New  Methodology”  by  Martin  Fowler, 
at  www.martinfowler.com/articles/ 
newMethodology.html. 


Extreme  Programming 

Built  around  12  basic  practices  ranging  from  pair 
programming  to  frequent  refactoring,  this  approach  is  more 
prescriptive  than  the  others.  For  more  information,  visit  www. 
extrem8programming.org  and  www.xprogramming.com  or 
read  Extreme  Programming  Explained:  Embrace  Change,  by 
Kent  Beck  (Addison  Wesley  Longman  Inc.,  1999). 


Scrum 

Based  on  the  empirical  process  control  model,  Scrum 
programming  relies  on  self-directed  teams  and  dispenses 
with  much  advanced  planning,  task  definition  and  manage¬ 
ment  reporting.  To  learn  more,  visit  www.contrGtchaos.com 
or  read  Agile  Software  Development  with  Scrum,  by  Ken 
Schwaber  and  Mike  Beeoie  (Prentice  Hall  PTR,  2001). 


Crystal 

This  approach  empowers  the  team  to  define  the  development 
process  and  refine  it  in  subsequent  iterations  until  it’s  stable. 
To  learn  more,  visit  http://crysialmethodologies.org/  or  read 
Agile  Software  Development:  Software  Through  People,  by 
Alistair  Cockburn  (Addison  Wesley  Longman,  2001). 


Adaptive 

Based  on  adaptive  rather  than  deterministic  theories,  this 
approach  offers  a  series  of  frameworks  to  apply  adaptive 
principles  and  encourage  collaboration.  For  more 
information,  visit  mw.adaptivesd.com  or  read  Adaptive 
Software  Development:  A  Collaborative  Approach  to 
Managing  Complex  Systems,  by  James  A.  Highsmith  III 
(Dorset  House  Publishing.  2000). 


Feature-Driven  Development 

This  model-driven,  short-iteration  process  is  built  around  the 
feature,  a  unit  of  work  that  has  meaning  for  the  client  and 
developer  and  is  small  enough  to  be  completed  quickly.  To 
learn  more,  read  Java  Modeling  Color  With  UML:  Enterprise 
Components  and  Process!  with  CD-ROM),  by  Peter  Coad, 
Eric  Lefebvre  and  Jeff  De  Luca  (Prentice  Hall  PTR.  1999). 


Dynamic  Systems 
Development  Method 

Conceived  as  a  methodology  for  rapid  application 
development,  DSDM  relies  on  a  set  of  principles  that  include 
empowered  teams,  frequent  deliverables,  incremental 
development  and  integrated  testing.  For  more  information, 
visit  www.dsdm.org  or  read  DSDM:  The  Method  in  Practice, 
by  Jennifer  Stapleton  (Addison  Wesley  Longman.  1997). 
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BY  SHARON  MACHLIS 

Greenland  native 
Rasmus  Lerdorf 
was  tired  of  writ¬ 
ing  the  same  code 
over  and  over 
while  creating  his  personal 
home  page  back  in  1995. 

So,  he  says,  he  wrote  “a  very 
simple  parser”  to  replace  tags 
in  an  HTML  file  with  some 
code  he’d  written  in  C. 

That  project  evolved  into 
PHP,  an  open-source  scripting 
language  now  installed  at  more 
than  one  in  every  five  Web  do¬ 
mains,  according  to  an  October 
2001  survey  of  more  than  6  mil¬ 
lion  domains  conducted  by 
Netcraft,  a  Bath,  England-based 
Internet  consulting  company. 

PHP  fans  say  the  language  is 
exceptionally  easy  to  learn.  It 
has  a  lot  of  built-in  functions 
such  as  simple  connections  to 
databases  and  support  for  the 
Lightweight  Directory  Access 
Protocol  (LDAP). 

“PHP  was  developed  from 
the  ground  up  to  be  a  Web  plat¬ 
form,”  says  Zeev  Suraski,  chief 
technical  officer  at  Zend  Tech¬ 
nologies  Ltd.  in  Israel  and  an 
author  of  the  current  version 
of  PHP.  “Very  powerful  appli¬ 
cations  can  be  created  in  a  very 
short  time. . . .  This  is  the  No.  1 
feedback  I  get  from  people.” 

PHP  code  is  highly  portable; 
it  moves  from  one  brand  of 
server  to  another  with  minimal 
or  no  rewrites.  This  multiplat¬ 
form  support  appeals  to  IT 
managers  who  don’t  want  to  be 
locked  into  a  single  brand. 


Free  and  Easy 

As  open-source  software, 
PHP  is  free  for  corporate  use 
and  works  well  with  other  pop¬ 
ular  open-source  projects,  in¬ 
cluding  the  Apache  Web  serv¬ 
er  and  the  MySQL  and  Post- 
greSQL  databases. 

“If  we  didn’t  have  PHP,  it 
would  cost  us  six  to  seven 
times  as  much  to  operate  [our] 
IT  environment,”  says  Kevin 
Crothers,  head  of  corporate 
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PHP  or  Perl? 


PHP 


DEFINITION 

PHP  is  an  open-source,  server-side  scripting 
language  designed  for  creating  dynamic  Web 
applications.  Originally  an  acronym  for  Per¬ 
sonal  Home  Page,  PHP  now  stands  for  PHP: 
Hypertext  Preprocessor  —  a  change  made 
after  the  scripting  language  evolved  far  beyond 
its  home-page-creating  origins. 


Web  systems  at  WorldCom 
Inc.  WorldCom  has  used  PHP 
for  several  major  Web  projects, 
both  internal  and  external,  in¬ 
cluding  the  front  end  to  a 
searchable  database  of  em¬ 
ployees  and  contractors  that 
contains  more  than  100,000 
records.  “It’s  all  LDAP-based,” 
he  says,  noting  that  PHP  had 
“the  strongest  LDAP  integra¬ 
tion  we’ve  been  able  to  find.” 

PHP  uses  server  resources 
efficiently,  Crothers  says.  It 
uses  memory  sparingly  and  al¬ 


lows  client-side  interpretation 
of  code  to  shoulder  some  pro¬ 
cessing  burden. 

“There’s  money  in  your 
pocket  right  there,”  he  says,  be¬ 
cause  a  PHP-based  application 
requires  less  server  hardware 
than  some  other  environments. 
Crothers  adds  that  he  has 


found  PHP  to  be  both  stable 
and  secure,  and  he  believes  that 
the  language  is  very  easy  to 
learn  compared  with  compet¬ 
ing  technologies  such  as  Micro¬ 
soft  Corp.’s  Active  Server  Pages 
(ASP)  technology  for  dynamic 
Web  applications. 

Room  for  Improvement 

However,  many  developers 
generate  ASP  code  from  soft¬ 
ware  such  as  Microsoft’s  Visu¬ 
al  InterDev,  which  can  be  easi¬ 
er  for  nonprogrammers  than 


coding  in  PHP,  Suraski  notes. 

At  present,  there  are  no 
high-level  commercial  WYSI¬ 
WYG  Web  authoring  tools  that 
automatically  generate  PHP 
pages,  which  means  you  need 
actual  programming  knowl¬ 
edge.  That  doesn’t  appeal  to 
every  Web  development  shop, 


but  Suraski  says  he  believes 
some  PHP  authoring  tools  will 
be  out  later  this  year. 

He  also  acknowledges  that 
PHP’s  object-oriented  program¬ 
ming  capability,  compared  with 
that  of  Java,  for  example,  “is 
not  as  powerful  as  it  should 
be.”  This  can  make  PHP  a  bit 
more  cumbersome  for  creating 
very  large-scale  applications. 
However,  improvements  are  in 
the  works  for  PHP  Version  5.0, 
he  said,  which  is  due  sometime 
in  the  second  quarter. 

Lerdorf  says  other  upcoming 
improvements  include  making 
PHP  Extension  and  Applica¬ 
tion  Repository  (PEAR)  more 
useful.  PEAR  solves  some 
Web-related  problems  but  isn’t 
part  of  PHP  itself.  “You  will 
also  see  some  nice  ways  to 
build  [Simple  Object  Access 
Protocol/Web  Services  De¬ 
scription  Language]  services 
with  PHP,”  he  says. 

PHP  is  an  interpreted  lan¬ 
guage  and  doesn’t  use  com¬ 
piled  binary  executables,  so 
PHP  applications  can  be  more 
easily  viewed  and  dissected  by 
competitors,  says  Crothers.  For 
hiding  code  or  creating  appli¬ 
cations  for  resale,  products 
such  as  Zend’s  Encoder  will 
mask  some  work. 

For  professional-level  quality 
assurance  and  testing,  Crothers 
advocates  using  a  product  such 
as  Komodo  from  Vancouver, 
British  Columbia-based  Active- 
State  Corp.  Komodo’s  integrat- 


Perl  has  been  a  popular  lan¬ 
guage  for  developing  Web  ap¬ 
plications.  But  is  it  better  than 
PHP  for  creating  dynamic  Web 
applications?  Opinion  is  split 
among  programmers. 

Many  who  like  to  get  under 
the  hood  and  have  a  great  deal 
of  control  favor  Perl.  And  as  a 
general-purpose  language, 

Perl  has  more  capabilities  and 
a  more  robust  debugging  envi¬ 
ronment  than  PHP. 

In  Perl,  many  Web  tasks  re¬ 
quire  add-on  modules,  where¬ 
as  PHP  uses  built-in  functions. 
Some  see  this  as  a  disadvan¬ 
tage,  while  others  say  it  lets 
programmers  pick  the  best  im¬ 
plementation  for  a  given  task. 

Perl’s  power  and  flexibility 
can  make  it  more  difficult  to 
learn  and  use.  “You  can’t  do  as 
much  with  PHP,  but  those  re¬ 
strictions  allow  novices  to  pick 
up  PHP  more  quickly  than  Perl, 
because  there  are  fewer  ways 
to  go  wrong,”  says  Jon  Orwant, 
editor  of  The  Perl  Journal. 

Many  programmers  use 
both.  “I  personally  use  a  com¬ 
bination  of  PHP  and  Perl  for 
many  of  my  projects:  Perl 
mostly  for  back-end  tasks, 
while  I  have  PHP  doing  all  the 
front-end  work,”  says  PHP  in¬ 
ventor  Rasmus  Lerforf.  “You 
could  do  the  front  end  in  Perl, 
but  it  would  be  a  bit  more 
work." 

-  Sharon  Machlis 


ed  development  environment 
is  available  free  to  individuals 
and  nonprofit  organizations. 

Ultimately,  Crothers  says, 
PHP  is  an  excellent  environ¬ 
ment  for  creating  Web  applica¬ 
tions  for  WorldCom.  “It  does 
everything,”  he  says.  I 


To  read  an  interview 
with  Lerdorf,  visit 

www.computerworid. 
eom/q?24785 
For  PHP  resources  on  the  Web.  see 
www.compirterworid.cont/q?a1530 


\ 

<?  mail($tomail,  “User 
Comments”,  Scomments, 
“From:  $frommail\n\n”);  ?> 

Above  is  an  example  of  simple  PHP  code  for  e-mailing  data  en¬ 
tered  into  an  HTML  form,  where  the  form  has  fields  called  comments 
(for  comments  entered  by  a  user)  and  frommail( for  a  user-entered  e-mail 
address),  as  well  as  a  hidden  field  tomail( for  the  address  where  informa¬ 
tion  should  be  sent).  The  e-mail  would  be  sent  with  the  subject  line  “User 
Comments." 

In  a  production  environment,  additional  code  would  be  added  for 
validation  and  security. 

v _ _ / 


■  Are  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 


Introducing  Vendor  Technology  Solutions 
at  Computerworld.com/vts 

Looking  to  quickly  pinpoint  the  vendors  you  need  to  do 
your  job?  Then  go  directly  to  wvwv.computerworld.com/vts, 
the  home  of  Computerworld’s  Vendor  Technology  Solutions. 

This  comprehensive  online  directory  makes  it  easy  to  iden¬ 
tify  all  the  players  doing  cutting-edge  work  in  the  areas  of  IT 
you  need  to  know  about  to  succeed  -  security,  storage, 
supply  chain,  ERP,  CRM,  mobile/wireless,  networking  and 
more.  You  can  drill  down  into  sub-categories  to  investigate 
providers  who  offer  specific  solutions  to  virtually  every 
aspect  of  IT. 

So  no  matter  how  complex  the  technology  challenge  you’re  facing,  you’ll  be  able  to  locate  the 
experts  who  can  help  you  face  it.  Vendor  Technology  Solutions  delivers  them  all:  specialists 
who  can  plan  IT,  implement  IT,  test  IT,  support  IT. 

Check  out  www.computerworld.com/vts  today.  It’s  never  been  easier  to  find  the  needle  - 
without  picking  through  the  haystack. 
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Getting  Security  Priorities 

Straight  in  the  New  "tear 

Router  security  holes,  virus  vulnerabilities  and 

smart  cards  hit  the  front  burner  as  2002  begins 


BY  VINCE  TUESDAY 

ur  office  is  usually  quiet 
this  time  of  year.  Our 
financial  year-end  isn’t 
sorted  out  until  the  end  of 
January,  but  once  that 
rush  is  out  of  the  way,  we  enjoy  a  peace¬ 
ful  few  weeks  planning  for  the  next  year. 

I  know  that  regardless  of  the  plans  I 
make,  I’ll  have  to  react  to  changes  in 
my  company  and  to  wider  events  in  in¬ 
formation  security.  But 
without  an  idea  of  what  I 
hope  to  achieve,  I  know  I’ll 
spend  my  year  bouncing 
from  emergency  to  emer¬ 
gency. 

I  can’t  avoid  emergen¬ 
cies,  but  there  are  some 
improvements  I  can  make 
to  our  policies  and  meth¬ 
ods  to  reduce  our  risk  of 
being  hit  by  severe  crises. 

I  expect  routers  to  be¬ 
come  a  large  area  of  con¬ 
cern  this  year.  The  CERT 
Coordination  Center  in 
Pittsburgh,  which  isn’t 
the  fastest  off  the  block 
with  warnings  these  days, 
has  released  notifications 
about  routers  being  used  for  attacks. 

We  already  use  the  access  control 
lists  (ACL)  within  our  routers  to  apply 
logical  access  control,  a  sort  of  cheap 
and  cheerful  firewall  setup  for  internal 
segregation.  We  have  several  hundred 
routers  of  various  sorts  and  many  net¬ 
work  staffers  who  can  access  them.  This 
complicates  the  management  of  ACLs, 
particularly  configuration  changes. 

We’ll  be  looking  at  Mountain  View, 
Calif.-based  Solsoft  Inc.’s  Solsoft  NP 
product  to  help  in  the  management  of 
all  of  our  ACLs.  Although  we  have 
integrity-checking  on  our  Windows 
and  Sun  Solaris  systems,  we  will  con¬ 
sider  installing  Portland,  Ore.-based 
Tripwire  Inc.’s  Tripwire  for  Routers 
and  Switches  to  identify  unauthorized 
changes  to  the  configuration  of  those 
systems. 


Another  project  that  will  keep  us 
busy  between  incidents  is  a  major 
upgrade  of  our  intrusion-detection  sys¬ 
tems  (IDS).  The  network  IDS  will  be 
the  easy  part.  Our  vendor,  Atlanta- 
based  Internet  Security  Systems  Inc., 
has  added  a  whole  new  architecture  to 
its  latest  version.  We  will  build  and 
deploy  new  central  servers  and  under¬ 
go  new  training  —  and  a  whole  new 
learning  curve. 

Every  plan  or  budget 
should  have  a  “blue  sky” 
project  that  will  almost  cer¬ 
tainly  get  discarded  in  the 
prioritization  process,  but  I 
include  mine  to  show  that 
we  are  thinking  ahead  and 
have  an  eye  toward  the  fu¬ 
ture.  (I  also  hope  that  cut¬ 
ting  my  blue-sky  project 
will  save  me  from  having  to 
cut  more  necessary  proj¬ 
ects.) 

Bypassing  Biometrics 

Some  people  claim  that 
2002  will  be  the  year  of  bio¬ 
metrics.  However,  they  said 
that  about  2001  and  just 
about  every  year  since  they 
stopped  promoting  the  year  of  public- 
key  infrastructure.  We  won’t  be  doing 
anything  with  biometrics.  I’ve  heard 
too  many  horror  stories. 

My  current  favorite,  from  another 
company,  is  a  rollout  to  a  trading  floor 
on  which  a  pair  of  identical  twins 
worked.  Apparently,  the  system  was  un¬ 
able  to  identify  any  difference  in  their 
fingerprints.  I  came  up  with  a  few  ideas 
to  help  them:  Brand  the  company  logo 
on  one  twin’s  thumb,  or  scar  their 
thumbs  with  acid.  But  these  were  reject¬ 
ed,  and  an  exemption  to  the  biometrics 
policy  was  made  for  those  two  people. 

Rather  than  biometrics,  my  mad  idea 
is  to  launch  new  cards  for  all  staff  mem¬ 
bers.  The  cards  will  combine  swipe¬ 
card  access  to  the  offices,  cashless 
vending  for  the  canteen  and  snack  ma¬ 
chines,  and  log-in  capability  for  desk¬ 


tops.  If  a  staffer  removes  his  card  from  a 
desktop,  the  machine  will  be  locked  so 
it  can’t  be  used  while  he  gets  food  or 
visits  the  washroom. 

We  can  eliminate  the  costs  of  pass¬ 
word  resets  and  the  risk  of  weak  pass¬ 
word  security.  We  have  yet  to  crack 
how  to  make  this  work  for  remote  ac¬ 
cess,  but  I’m  sure  we  can  find  a  suitable 
solution. 

We’ve  sounded  out  the  physical  secu¬ 
rity  teams,  and  they  support  the  idea, 
but  it’ll  be  expensive  and  hard  to  get  the 
cards  working  across  all  our  systems.  I 
expect  that  the  project  will  be  canned  at 
the  blueprint  stage.  Eventually,  howev¬ 
er,  the  time  will  be  right,  and  laying  the 
sgigHlndwork  will  have  been  worthwhile. 

Year  of  the  Worm 

2001  was  the  year  of  the  worm  with 
some  highly  virulent  examples.  We 
avoided  infection  because  we  had  pro¬ 
tective  measures  in  place  and  because 
we  were  lucky. 

We  can’t  count  on  being  lucky  forev¬ 
er,  so  we’ll  have  to  be  more  careful. 
And  the  threat  keeps  growing.  The  re¬ 
cent  bug  in  the  Unix  log-in  command 
will  no  doubt  soon  be  rolled  into  an  au¬ 
tomated  attack.  Since  Linux  and  Unix 
haven’t  historically  suffered  from  virus 
infections,  few  machines  are  protected 
with  antivirus  updates,  leaving  them 
open  to  become  reservoirs  of  infection 
that  can  launch  probes  onto  other  ma¬ 
chines.  I’ll  have  to  look  into  deploying 
antivirus  protection  onto  our  Solaris 
servers  this  year. 

I’ve  also  got  a  nagging  concern  about 
Secure  Sockets  Layer  (SSL)  access  to 
Web  sites.  We  encourage  SSL  use  be¬ 
cause  it  protects  staff  information  from 
being  intercepted  or  tampered  with  in 
transit  on  the  Internet.  However,  using 
SSL  means  that  as  data  is  encrypted, 
our  proxy  servers  can’t  scan  the  down¬ 
loads  for  viruses,  leaving  us  reliant  on 
desktop  protection.  It’s  very  hard  to 
ensure  that  all  desktops  are  updated  in 
a  timely  fashion.  Before  we  had  effec¬ 
tive  gateway  protection  from  the 
worms,  we  had  outbreaks  despite  desk¬ 
top  cover. 

One  new  virus  takes  the  biological 
metaphor  even  further  by  using  evolu¬ 
tion  to  update  its  attack  methods.  Once 
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LINKS: 

www.  cert.  org/archive/pdf/DoS_ 
trends.pdf:  Every  security  manager 
should  read  this  CERT  report,  published 
in  October,  about  the  risks  of  routers 
and  denial-of-service  attacks. 

www3.ca.com/solutions/ 
collateral.asp?CT=65&ID=1137: 
Here's  the  skinny  from  Isiaridia,  N.Y.- 
based  Computer  Associates  Interna¬ 
tional  Inc.  on  the  evolutionary  Win32.- 
Hybris  virus,  which  uses  newsgroups 
to  spread. 

http://xtorce.iss.net/alerts/ 
advisefOS.php:  Read  this  alert  from 
Atlanta-based  Internet  Security  Sys¬ 
tems  Inc.  to  learn  about  a  serious 
buffer-overflow  vulnerability  in  the  log¬ 
in  program  used  by  Solaris  and  other 
operating  systems  based  on  Unix  Sys  V. 

www.solsoft.com/:  This  site  includes 
information  on  the  Solsoft  NP  security 
policy  manager  I’m  evaluating. 

www.tripwire.com/:  I’m  considering 
using  Tripwire  for  Routers  and  Switch¬ 
es  to  monitor  our  routers,  but  Tripwire 
also  offers  a  version  that  works  for 
servers,  as  well  as  an  open-source 
Linux  edition. 


the  virus  infects  a  certain  number  of 
machines,  it  posts  the  method  it  used 
as  a  chunk  of  code  to  a  newsgroup. 
Other  copies  of  the  virus  read  the 
newsgroup  automatically  and  start  us¬ 
ing  the  methods  that  are  most  com¬ 
monly  posted  to  improve  the  program’s 
ability  to  spread. 

Not  only  can  the  virus  writers  update 
their  code  once  it’s  out  there,  but  just  as 
in  the  biological  world,  those  viruses 
that  survive  attempts  to  destroy  them 
will  pass  on  their  methods  to  other 
copies.  I  expect  we’ll  see  a  lot  more  of 
this  in  the  next  12  months. 

I  expect  that  2002  will  include  more 
—  and  more  severe  —  information  se¬ 
curity  incidents  across  all  companies. 
Although  I  hope  we  won’t  be  as  badly 
hit  as  those  who  haven’t  taken  reason¬ 
able  precautions,  I  still  don’t  feel  se¬ 
cure.  What  have  I  missed?  What  are 
your  plans  and  predictions  for  the  rest 
of  the  year?  Let  me  know  in  the  Security 
Manager’s  Journal  Forum.  I 

Discuss  this  week's  column  and 
catch  up  on  the  latest  security 
developments  online  at: 

www.cornputerworid.com/q7q2000 
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This  week's  journal  is  written  by  a  real  security  manager,  “Vince  Tuesday,"  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  vince.tuesday@hushmail.com  or  go  to  the  Security  Manager’s  Journal  forum. 


You  won't  see  the  next  network 
security  threat  coming. 


sw^ 


When  the  next  Code  Red,  Goner 
or  Nimda  comes  along,  STAT 
could  be  the  difference  between 
a  crippled  system  and  one  that's 
completely  unaffected. 


But  STAT  will. 

Arming  yourself  against  the  next  threat  requires  more  than  vigilance.  It  requires  a  new  level  of  defense. 
At  Harris,  we  know;  for  more  than  25  years,  we've  helped  keep  government  networks  secure — and 
now  we're  helping  businesses  stay  ahead  of  the  enemy  with  our  STAT  intrusion  prevention  tools.  For 
example,  STAT  Neutralizer™proactively  protects  servers  and  workstations  by  using  behavioral 
analysis  to  prevent  intrusions  and  malicious  activities  from  taking  place.  STAT  Neutralizer  provides  a  new 
layer  of  security  to  defend  your  network  during  its  most  vulnerable  time —  before  an  anti-virus 
update  can  be  downloaded.  And  that's  just  the  beginning  of  what  STAT  can  do.  To  start  winning  the 
war  on  cyberattacks,  call  1  -888-725-STAT  (7828)  today  or  visit  our  website. 


next  level  solutions 


STAT  ANALYZER 
STAT  NEUTRALIZER 
STAT  SCANNER 


pro.STATonline.com 
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Search  Tool  Delivers 
Relevant  Answers 


Accuracy  and  ease  of  use  distinguish 
Atomica’s  Answer  Delivery  search  engine 


BY  MARK  HALL 

ALiTTLE-remarked- 
upon  consequence 
of  the  Food  and 
Drug  Administra¬ 
tion’s  acceleration 
of  the  process  for  approving 
drugs  has  been  that  medical 
dictionaries  quickly  become 
outdated.  This  has  forced  many 
scientific  and  medical  re¬ 
searchers  to  rely  on  the  Web 
for  the  latest  information. 

But  the  problem  with  the 
Web,  according  to  Bruce  Ma- 
liken,  internal  support  supervi¬ 
sor  at  Silver  Spring,  Md.-based 
Social  &  Scientific  Systems 
Inc.,  is  that  most  search  en¬ 
gines  give  users  too  much  un¬ 
necessary  information  to  sort 
through. 

That’s  why  his  and  other 
organizations  have  embraced 
search  technology  from  Atom- 
ica  Corp.,  a  60-person  start-up 
in  Burlingame,  Calif. 

Maliken  describes  Atomica’s 
Answer  Delivery  software  as 
“an  assisted  search  engine” 
that  lets  users  at  his  285-person 
consultancy  search  the  Web  as 
well  as  in-house  documents 
and  resources. 

Selling  Simplicity 

The  key  to  the  software’s 
success,  say  Maliken  and  oth¬ 
ers,  is  that  it’s  simple  to  use. 

Founded  in  1999  as  GuruNet, 
with  a  product  by  the  same 
name  that  focused  only  on 
Web  content,  the  company  re¬ 
vised  its  Web-only  approach  in 
late  2000,  adding  enterprise- 
specific  tools  and  renaming  it¬ 
self.  What  the  company  didn’t 
change  was  its  emphasis  on 
ease  of  use. 

“Most  people  who  need  in¬ 
formation  are  not  power  users 
of  enterprise  software  like 
Siebel  or  SAP,”  explains  Bob 
Rosenschein,  Atomica’s  chair¬ 
man,  founder  and  CEO. 


The  company  currently  ships 
Atomica  Enterprise  and  Atom- 
ica  for  Lotus  Discovery  Server. 
But  it  has  gone  a  step  further 
by  offering  subject-area  search 
tools,  which  provide  for  more 
targeted  and  predefined  infor¬ 
mation  sources. 

The  first  product,  Atomica 


Enterprise  for  Sales  and  Mar¬ 
keting,  has  templates  to  help 
users  gather  information  in  ar¬ 
eas  such  as  product  develop¬ 
ment  and  competitive  analysis. 

The  U.S.  Geological  Survey 
(USGS)  has  been  working  with 
Atomica  Enterprise,  preparing 
to  roll  it  out  to  its  offices  in  all 
50  states. 

According  to  Denise  Wilt¬ 
shire,  senior  adviser  for  strate¬ 
gic  planning  at  the  agency’s 
headquarters  in  Reston,  Va,, 


Most  people 
who  need 
information  are 
not  power  users 
of  enterprise 
software  like 
Siebel  or  SAP. 

BOB  ROSENSCHEIN, 
FOUNDER.  CHAIRMAN  AND  CEO, 
ATOMICA  CORP. 

Atomica  Corp. 

1409  Chapin  Ave. 
Burlingame,  Calif.  94010 
(650)  425-1000 

Web:  www.atomica.com 

Niche:  Information  retrieval  sys¬ 
tems  for  enterprise  and  Web- 
based  resources  and  repositories 

Company  officers: 

•  Bob  Rosenschein,  founder, 
chairman  and  CEO 


•  Mike  Spangl,  president  and  chief 
operating  officer 

•  Mark  Matossian,  vice  president 
of  finance  and  administration 

•  Jeff  Schneiderman,  vice  presi¬ 
dent  of  engineering 

Milestones: 

•  January  1999:  Company  founded 
as  GuruNet. 

•  November  2000:  Name  changed 
to  Atomica. 

•  March  2001:  Atomica  Pro  ships. 

•  August  2001:  Atomica  Answer 
Delivery  System  for  Enterprise 
ships. 

•  October  2001:  Atomica  Answer 
Delivery  System  for  Lotus  Discov¬ 
ery  ships. 

Burn  money:  $32  million  from 
venture  capitalists  and 
private  investors,  in¬ 
cluding  Flatiron  Part¬ 
ners,  Garage  Tech¬ 
nology  Ventures  and 
John  Scully. 

Products/pricing: 

Enterprise  implementation 
is  $100,000,  plus  $250  per  user 
per  year. 

Customers:  USGS;  Social  & 
Scientific  Systems;  Foxboro 
School  District,  Foxboro,  Mass. 

Red  flags  for  IT: 

•  Atomica’s  systems  aren't  as 
powerful  as  a  search  portal. 

•  The  systems  lack  some  adminis¬ 
trative  tools. 

•  Atomica's  systems  don’t  allow 
for  compound-word  search  capa¬ 
bilities. 


the  prototype  work  done  so  far 
has  been  promising. 

The  USGS  has  a  lot  of  data  in 
its  offices  that  needs  to  be 
readily  available  to  its  internal 
users  as  well  as  to  its  customers 
in  education,  government  and 
other  industries,  she  says. 

Wiltshire  explains  that  build¬ 
ing  a  unified  portal  “to  synthe¬ 
size  and  integrate  everything  is 
a  costly  thing  to  do.”  Yet  once 
such  automation  is  done,  the 
cost  benefits  are  there  to  be 
reaped,  she  says. 


Automation  Benefits 

Wiltshire  says  she’s  consid¬ 
ering  using  Atomica’s  tools  so 
the  USGS  can  get  the  benefits 
of  automation  without  invest¬ 
ing  in  a  full-scale  portal.  With 
Atomica,  she  says,  her  users 
have  found  they  have  “the  ca¬ 
pability  to  reach  down  into  sci¬ 
entific  data,  text,  bibliographic 
data  and  synthesize  it  and  cus¬ 
tomize  it  for  our  audiences.” 

Atomica’s  software  is  al¬ 
ready  paying  off  for  Social  & 
Scientific  Systems.  “It’s  made 
my  users  more  productive,” 
Maliken  says.  Worker  produc¬ 
tivity  is  a  priority  for  the  com¬ 
pany  —  so  much  so  that  IT  has 
someone  working  nearly  full¬ 
time  just  to  eliminate  spam, 
which  wastes  employee  time, 
he  explains.  The  Atomica  tech¬ 
nology  has  helped  improve 
performance,  he  says. 

That’s  because  it’s  fast  and 
easy  to  use.  The  search  bar 
tivpuTfr^  floats  on  the  screen  no 
'  v  J  "  matter  what  application 
a  user  is  in,  and  it  grabs 
information  from  the 
Internet  without  load¬ 
ing  advertisements  that 
can  distract  users  and 
slow  response  time. 
Atomica’s  software  also 
works  with  standard  Light¬ 
weight  Directory  Access  Pro¬ 
tocol  directory  services  so 
users  can  access  only  internal 
data  sources  for  which  they 
have  set  permissions. 

Both  Maliken  and  Wiltshire 
offer  their  kudos  to  Atomica’s 
staffers.  “They’re  extremely  re¬ 
sponsive  to  needs  and  ideas,” 
says  Maliken. 

Wiltshire  says  the  start-up’s 
small  size  works  to  its  advan¬ 
tage.  “They’re  nimble  and 
jazzed,”  she  says.  I 
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Name? 

Cute  names  are  the  norm  in  the  search 
technology  market.  GuruNet  morphed 
into  Atomica,  and  PurpleYogi,  the  com¬ 
pany’s  Mountain  View,  Calif. -based 
competitor,  relaunched  itself  as  Stratify 
Inc.  a  few  years  ago. 

Fortunately,  the  software  from  these 
companies  is  better  than  cute,  accord¬ 
ing  to  Kyle  Johnson,  an  analyst  at  Cam¬ 
bridge,  Mass.-based  consultancy  For¬ 
rester  Research  Inc. 

Good  technology,  however,  won’t 
necessarily  get  noticed  in  a  market  with 
overlapping  competitors.  Johnson 
points  out  that  Atomica  not  only  directly 
competes  with  Stratify,  but  the  company 
also  has  to  deal  with  portal  players  such 
as  Plumtree  Software  Inc.  and  E.piph- 
any  Inc.  as  well  as  search  engine  pro¬ 
viders  such  as  Autonomy  Corp.  in  Cam¬ 
bridge,  England,  and  Inktomi  Corp.  in 
Foster  City,  Calif. 

“Still,”  he  says,  “they’re  an  interesting 
alternative  to  portals.” 

Atomica  is  more  interesting  when  it 
comes  to  price.  Johnson  estimates  that 
an  enterprise  installation  of  Atomica’s 
software  runs  about  $100,000,  while 
San  Mateo,  Calif. -based  E.phiphany’s 
portal  generally  costs  $150,000  and 
San  Francisco-based  Plumtree’s  soft¬ 
ware  averages  $230,000. 

Shortfalls 

Johnson  says  that  despite  the  com¬ 
plexity  and  cost  differences,  portals  do 
far  more  for  companies  than  Atomica 
can.  For  example,  he  says,  Atomica’s 
software  has  fewer  administrative  tools 
and  fewer  development  opportunities  to 
integrate  it  with  other  applications. 

Even  bullish  users  want  more  from 
Atomica.  Social  &  Scientific  Software’s 
Bruce  Maliken,  who  raves  about  the 
product,  says  it  does  a  poor  job  handling 
compound-word  searches  and  it’s  too 
focused  on  business.  The  product 
needs  to  build  in  more  scientific  domain 
expertise,  he  says. 

Atomica  CEO  Bob  Rosenschein  says 
the  search  software  will  acquire  more 
features  in  time.  Fie  argues  that  ease  of 
use  and  the  ability  to  search  both  Inter- 
net-based  and  company-housed  infor¬ 
mation  sources  are  the  most  important 
features  to  get  right  first. 


-Mark  Hall 


SPECIAL  OFFER! 

Register  by  February  20  and 
receive  a  $200  discount  off 
the  conference  fee. 


Register  Online  Now 

www.idc.com/Directions02/Boston 

or 

www.idc.com/Directions02/SanJose 


or  Call 

800.605.5849 

(978.597.0133  outside  the  US) 


rflnfoWofld 


March  20,  2002 
Boston,  Massachusetts 
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IT  Leadership  for  the  Rebound 


April  3,  2002 
San  Jose,  California 


The  rebound  is  coming.  It  always  does.  And  while  it's  easy  to  focus  on 
the  “when”  of  the  rebound,  the  real  question  should  be  “what  then?” 
After  the  IT  recession  of  2001  we  can  expect  new  user  buying 
behavior,  new  channel  requirements  and  new  vendor  success  factors. 

Attend  IDC's  Directions  and  learn  about  the  timing  and  strength  of  the 
rebound,  the  shape  of  the  new  industry  it  will  leave  in  its  wake,  and  the 
new  strategy  for  leadership  it  will  demand  of  suppliers. 

Matured  topics  include: 

•  Competing  in  the  age  of  bioscience 

•  Global  software  in  a  changed  world 

•  Life  beyond  the  PC:  How  to  succeed  in  the  device  market 

•  Delivering  the  promise  of  broadband  networks 

•  Disaster  prevention,  p  eparedness,  and  recovery  services 

•  IP  t  lephony 

•  Efl  ictive  indirect  sales  strategies 

•  V  3b  serv  ss 

•  Interactive  consumer  services 

•  ifrastruc  jre  and  services  o  enable  the  wi  eless  enterprise 
...  and  much  more! 


Analyze  the  Future 

Co-sponsored  by: 


To  view  a  complete  list  of  topics,  please  go  to 

www.idc  com/events 


PC  WORLD 
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CONSTRUCTIVE 

DISRUPTION 

CTO:  AGENT  for  CHANGE 


April  8-io,  2002 

The  Westin 
St.  Francis  Hotel 

San  Francisco,  CA 


KEYNOTE  SPEAKERS 

■  Dr.  john  Seely  Brown 

Chief  Scientist,  Xerox  Palo  Alto  Research  Center 

■  K.  Eric  Drexler 

Chairman,  The  Foresight  Institute 

■  Patrick  Gelsinger 

VP  &  CTO,  Intel 

■  Norman  Lorentz 

CTO,  U.S.  Federal  Government 

■  Irving  Wladawsky-Berger 

VP  of  Technology  Strategy,  IBM 

FEATURED  SPEAKERS 

■  Kent  Beck 

Director,  Three  Rivers  Institute 

■  Marc  BeniofF 

Chairman  &  Founder,  salesforce.com 

■  John  Blair 

Co-founder,  President,  &  CEO,  Kenamea 

■  Tim  Bray 

Founder  &  CTO,  Antarti.ca  Systems 

*  Barry  Briggs 

CTO,  Wheelhouse 

*  Tim  Howes,  Ph.  D. 

CTO,  Executive  VP  of  Loudcloud 
Development,  &  Co-Founder,  Loudcloud 

Sheldon  Laube 

CEO,  Centerbeam 

*  Dr.  Henry  McDonald 

Director,  NASA  Ames  Research  Center 

Dawn  Meyerriecks 

CTO,  DISA 

Mike  Ragunas 

CTO,  Staples.com 

Curtis  Robb 

Senior  VP  &  CTO,  Delta  Technology, 

Delta  Airlines 


Gene  Rogers 

CTO,  Boeing 

Rick  Hayes-Roth 

CTO,  Software  Solutions,  Hewlett-Packard 

Dr.  Eric  Schmidt 

Chairman  &  CEO,  Google 

Andrew  Wolfe 

CTO,  SONICBlue 


The  challenges  of  the  CTO  are  unlike  anyone  else’s.  You’re  the  one  that  everyone  comes  to 
for  answers,  solutions,  predictions  and  miracles.  As  the  miracle  worker  of  your  enterprise, 
it  is  your  job  to  decipher  what  works  and  what  doesn’t. 

Now  in  its  3rd  year,  this  invitation-only  conference  brings  together  an  exclusive  crowd  of 
people,  like  you,  who  are  driving  the  use  of  disruptive  technologies  to  transform  business 
processes  and  define  the  next  wave  of  innovation. 

Join  250  other  CTOs  for  2^/2  days  of  networking,  keynotes,  panels,  practical  discussions, 
and  working  sessions.  Share  ideas  and  swap  stories  about  the  day-to-day  challenges  that 
CTOs  face  at  the  only  event  created  by  CTOs  for  CTOs. 


FEATURED  SESSIONS 

a  The  Role  of  the  CTO  in  Today’s  Economy 

■  Disruptive  Technologies:  From  Annoyance  to  Reliance 

■  Extreme  Programming 

*  Grid  Computing 

■  Wireless  infrastructure  issues 

■  A  Look  Inside  the  Labs 

■  Software  as  a  Service 

■  Disaster  Recovery  Best  Practices 

■  Marriage  of  Business  and  Technology:  Critical  Skills  for  CTOs 

■  Business  Continuity  Best  Practices 

•  IT  Project  Management  and  Priority-Setting  in  Today’s  Economy 

■  Next  Generation  Systems  Management 


SPECIAL  EVENTS  SCHEDULED 

»  Monday,  April  8,  2002  Pac  Bell  Park  Technology  Tour 

Be  our  guest  for  a  behind-the-scenes  technology  tour  of  Pac  Bell  Park,  home  of  the  San  Francisco  Giants. 
The  tour  will  be  conducted  by  the  SF  Giants  CIO  and  a  senior  IS  department  staff  member. 

■  Wednesday,  April  10,  2002  SF  Giants  vs.  LA  Dodgers  Baseball  Game 

Be  our  guest  as  the  San  Francisco  Giants  take  on  the  LA  Dodgers  at  Pac  Bell  Park  in  San  Francisco. 

*  Attendance  to  these  events  is  available  on  a  first-come  first-served  basis.  Space  is  limited. 


Request  your  invitation  now! 

Go  to  http;//ctoforum.infoworid.com/RF19 


Contributing  Sponsor: 


PRODUCED  BY 


InfoWorld 

CONFERENCES 


For  more  information,  contact:  866-292-5805 

For  sponsorship  information,  contact:  ctosponsor@infoworld.com  |  For  speaker  opportunities,  contact:  ctospeakers@infoworld.com 


COMPUTERWORLD 


Call  1-800-227-8365  X7540 
or  email  us  at 

J  oh  n_ki  m  @i  nfoworld.com 


www.diskdupe.com 

Cleveland,  OH 
1.800.551.3475 


softwar^jUp|jcatjon 

free  ground 

•  CD-ROM  /DVD  Replication  shipping  wm 

•  CD-R  /  DVD-R  Duplication 

•  CD-R/  DVD-R  Screen  Printing 

•  Diskette  Duplication 

•  Custom  Labeling/ Packaging 

•  Fulfillment  &  Distribution 

To  quote  your  next  project,  call  or  e-mail; 

1.800.551.3475  •  sales@diskdupe.com 


Phoenix,  AZ 
1.800.645.9490 

DISKCOPY  Duplication  Services,  Inc. 


PHILIPS 


^Philips  cSmart 

r  6000  Hour  Lamp  Life! 

Features  1000  Lumens  of  brightness 
SVGA  and  7.9  pounds 


InFocus 


s2995* 


InFocus  LP130 

“Refurbished  Units 
Save  $500.00 

XGA  Resolution 

1100  Lumens  of  brightness 


Professional  Projectors 
Purchase  •  Rent  •  Lease 

877.619.2264 

www.AVPartner.com/iworld 


OSMP 


Projector  Depot 


A  Global  Imaging  Systems  Company 


Computerworld  •  February  4,  2002 
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Your  pres 


,r  presentations  -«■ 

take  oner  any  ro°m; 

*  ....  0f  all  sixes 

.  for  rooms  or  «■ 


Projection  for 


For  the  best  deals  in  New,  Used,  B  Stock  and  Closeout  projectors,  goto.. . 

www.adtech-sys.com/cp 

Epson  •  Hitachi  •  InFocus  •  Mitsubishi  •  Panasonic  •  Plus  •  Proxima  •  Sanyo  •  Toshiba  •  ViewSonic 


Proxima  DP6850+ 

XGA  •  1800  Lumens  •  13.2  lbs. 

$2,995 


InFocus  LP350 

XGA  •  1300  Lumens  •  6.7  lbs. 

$2,795 


ViewSonic  PJ1060 

XGA  •  2200  Lumens  •  13.2  lbs. 
3  Year  Warranty 

$3,495 


NEW  > 

Sanyo  PLC-XW20/PLC-XU35 

XW20  •  XGA  •  1 100  Lumens  •  5.7  lbs. 
XU35  •  XGA  •  2000  Lumens  •  8.6  lbs. 

PLc-xw2o  $2,995 
PLC-XU35  $3,995 


ADTECH 

Empower  your  presentations 

CALL  800-419-0023 


Epson  PowerLite  800p/810p 

800p  •  XGA  •  1 500  Lumens  •  9.3  lbs. 
81  Op  •  XGA  •  2000  Lumens  •  9.3  lbs. 

800p  $3,989 
81  Op  $4,449 


Toshiba  TLP-670 

XGA  •  1300  Lumens  •  8  lbs. 

B  Stock  $2,495 
New  $2,995 


- 


Proxima  DX2 

XGA  •  1000  Lumens  •  5  lbs. 
DLP  Technology 

$1,995 


Sanyo  PLC-XP40/PLC-XP45 

XP40  •  XGA  •  2600  Lumens  •  17.4  lbs. 
XP45  •  XGA  •  3500  Lumens  •  18.5  lbs. 

XP40  $4,995 
XP45  $6,495 


InFocus  LP28Q 

SVGA  *1000  Lumens  *5.7  lbs. 

$1,995 


Proxima  DP9280 

XGA  •  3000  Lumens  •  20.3  lbs. 
Lens  shift,  power  zoom/focus 

$4,995 


Mitsubishi  X70UX 

XGA  *1100  Lumens  •  7  lbs. 
3  Year  Warranty 

$2,695 


Proxima  DP9260 

XGA  •  2200  Lumens  •  15.2  lbs. 

$3,495 


NEW 


Epson  PowerLite  703 

XGA  •  1000  Lumens  •  5.8  lbs. 


$3,569 


Proxima  (JltraLight  X350 

XGA*  1100  Lumens *4.2  lbs. 

$2,795 


IT  CAREERS 


DTI,  a  software  consulting  co. 
in  Fremont,  CA  seeks  Software 
Consultants  at  all  levels  to 
perform  JD  Edwards  implemen¬ 
tations  and  EAI  integration. 
Requires  travel. 

Send  resume:  Careers,  DTI, 
47001  Benicia  St„  Fremont,  CA 
94538.  Fax  (510)  353-3706  or 
email:  careers@dtius.com 


"We  seek  professionals  with 
industry  exp.  for  scoping,  planning, 
etc.  of  solutions/enhancements 
to  web  enabled  SAP  R/3  appls.; 
manage  HRMS  life  cycles  &  high 
level  strategic  analysis,  design, 
etc.  of  HR  Service  delivery 
supporting  HR  transition  from 
transactional  process  flow  to 
business  flow,  etc.  Hands  on 
experience  of  web  enabling  HR 
Module  using  Web  Studio,  ITS, 
CATS,  ESS  reqd.  Pay  matching 
exp.  Foreign  educ.  equiv  &/ 
or  combination  of  educ/exp. 
accepted.  Tavel/relocation  reqd. 
Resume  to  Global  Resources 
Mgmt.,  Inc,  3355  NE  Expwy,  Ste. 
205,  Atlanta,  GA  30341 ." 


CBOE 

CHICAGO  BOARD  OPTIONS  EXCHANGE 


Chicago  Board  Options  Exchange 
is  the  world's  largest  options 
exchange.  To  grow  our  business 
and  increase  our  technical  edge, 
we  develop  and  implement  the 
latest  technology.  We  currently 
have  the  following  opportunities: 

•  Engineer 

•  Software  and  Hardware 
Engineer 

•  Sr.  Programmer  Analyst  and 
Programmer  Analysts 

As  part  of  the  CBOE,  you  will 
enjoy  a  competitive  salary  and 
excellent  benefits.  For  further 
consideration,  please  send  your 
resume,  via  fax  or  e-mail  indicating 
the  job  title  in  the  subject  line. 
Resumes  may  be  also  be 
submitted  via  mail  to  CBOE, 
Attn:  Human  Resources,  400 
S.  LaSalle,  Chicago,  IL  60605. 
For  further  information  regarding 
these  opportunities  as  well 
as  other  opportunities,  please 
visit  our  website  at  http:// 
www.cboe.com.  E-mail: 

j  o  b  s  2  0  0  2 

©cboe.com  or  fax:  (312)786- 
7808.  Principals  only,  please. 
CBOE  is  an  equal  opportunity 


"We  have  multiple  openings  for 
IT  professionals  with  industry 
exp.  (various  skills  combination 
reqd.)  in  C,  C++  ,  HP-UX, 
Progress  7.3E,  Astea,  SAP  R/3. 
SQL  Server  7,  VJ++,  HP  9000, 
Oracle  7.X/8,  VB,  VB  Script, 
Informix  4  GL/7.X,  Informix 
Dynamic  4GL,  Baan,  MFG  Pro, 
Informix  Online,  SQL  Base,  SCO 
Unix,  Informix  SE,  etc.  Some 
positions  require  MS  or  equiv. 
CS,  Engg.,  Math.,  Bus.  Admin. or 
rel.  field.  Others  require  BS  or 
equiv.  in  any  of  the  above.  Pay 
matching  with  exp.  Foreign  educ. 
equiv  &/or  combination  of  educ/ 
exp.  accepted.  Travel/relocation 
reqd.  Res.  &  salary  expectations 
to  HR  Dept.,  105  Nobel  Ct., 
Alpharetta,  GA  30005." 


♦ 


Database/Systems  Administrator: 
Manage  &  administer  Windows 
2000  Server  &  SQL  Server  2000 
database  &  applications.  Help 
establish  &  manage  database  & 
system  change  mgmt.  procedures. 
Assist  w/architect  overall  data 
structure.  Provide  performance 
tuning  &  data  conversion  service. 
Manage  scalability  &  system 
upgrade  process.  3  yrs  exp.  in 
the  position  offered  in  a  database 
or  systems  administration  position 
managing  mission  critical  data¬ 
bases  environment  w/large  user 
base.  3  yrs  exp.  must  include 
exp.  in  Microsoft  IIS  Server, 
Microsoft  Digital  Internet  Archi¬ 
tecture,  Microsoft  Clustering 
Technology,  Microsoft  Biztalk 
Server,  Microsoft  Message 
Queue.  MCDBA  required. 
Resume  to  Ash  Momin  Supna 
Technologies  Corp.,  4438 
Lyngate  Dr.,  Lilburn,  GA  30047. 


the  place  where  your  fellow  readers  are  getting 
a  jump  on  even  more  of  the  world's  best  jobs. 


Stop  in  a  visit. 

See  for  yourself. 


End-to-End  Integration 
Strategies  &  Solutions 


2002  Event  Schedule 

*  Chicago  -  March  25-27 

*  New  York  -  Sept.  23-25 

*  San  Francisco  -  Nov.  4-6 

Request  a  Brochure  Online  &  Be  Entered 
to  Win  a  3-Day  Pass  (a  $1495  value)! 


Featuring  leading  analysts,  authors 
and  end  user  case  studies,  this 
series  details  the  business  driven 
strategies,  the  latest  technological 
advancements,  proven  “Best  of 
Breed”  solutions  and  trends  in 
e-business  integration. 

Join  us  for  actionable  advice, 
invaluable  networking  opportunities  and 
practical  solutions  to  your  most  pressing 
e-business  integration  challenges. 

Conference  Co-Chairmen 


Ken  Vollmer 

Research  Director 
B2B  Integration  Strategies 
Giga  Information  Group 

Produced  by 


William  M.  Ulrich 

President 

Tactical  Strategy  Group,  Inc. 


Brainstorm 


Gig*  Information  Group* 

Technology  advice. 
Business  results. 


www.brainstorm-group.com  T:  508-393-3266 


Business . 
integration” 

CONFERENCE  SERIES 


The  eBusiness  Integration  Conference 
Series  is  the  leading  forum  specifically 
designed  to  provide  business  and 
IT  leaders  with  solutions  to  the  full 
spectrum  of  e-business  integration 
challenges. 


Independent,  Contract  Sales  Representatives 


It’s  like  having 


our  own  ousmess 


...only  better. 


This  is  your  opportunity 
to  use  your  executive 
level  contacts, 
aggressive,  entrepreneurial 
spirit  and  sales  presentation 
experience  to  build  a 
lucrative  business.  As  a  top 
20  IT  services  company, 
we're  ready  to  contract 
with  you  to  earn  high 
commissions  for  selling 
our  best-in-breed  products 
and  services  to  your  client 
base.  The  expanse  of 
our  software  products 
and  capabilities  in  human 
capital  management,  web 
development,  staffing  and 
technical  instruction 
programs  will  excite  you 
to  hit-  the-  ground  running 
after  lucrative  sales  of 
$1-30+  million. 


To  excel  on  this  level,  you  must  embody  the 
entrepreneurial  spirit  and  thrive  when  given 
ample  leads,  support  and  complete 
independence  to  aggressively  pursue  your 
potential  clients.  Typically,  qualified 
candidates  will  be  retired  executives, 
successful  sales  professionals  or  any  driven 
individual  with  a  great  rolodex  filled  with 
high  level  decision  makers  regarding  the 
purchase  of  IT  products  and  services. 

If  qualified,  you'll  have  the  resources  and 
support  of  a  world  class,  Top  20  IT  Services 
organization  at  your  disposal.  These  resources 
will  include  sophisticated  marketing  and 
public  relations  materials,  an  efficient  lead 
clearing  house  and  skilled  technical  support. 
This  commission  only  relationship  will  allow 
you  to  build  your  own  business  and  you  will 
be  reimbursed  for  your  expenses. 


For  immediate  consideration,  send  your 
resume  to  our  recruitment  advertising 


agency: 


fericson@bsa.com 


EOE. 


CW020204N.1 
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SIEMENS 

Take  a  Closer  Look. 

It's  a  great  feeling  to  work  for  a  company  and 
know  you  really  belong  there.  When  the  envi¬ 
ronment,  the  people,  and  the  opportunity 
exceed  your  expectations  and  your  hard  work 
is  appreciated. 

Software  Engineer 

We  are  seeking  a  Software  Engineer  to  design, 
code,  implement,  and  test  complex  product 
enhancements.  Other  responsibilities  include 
researching  and  coordinating  new  features  con¬ 
cepts;  analyzing  problems  and  suggesting  inno¬ 
vative  solutions;  designing  and  testing  plans; 
training  and  reviewing  design  work  of  program¬ 
mers.  Requires  a  Master’s  or  equivalent  in 
CompSci,  Information  Systems,  Engineering,  or 
related  field.  In  lieu  of  a  Master’s  Degree,  a 
Bachelor's  Degree  plus  5  years  as  a  Programmer 
is  required.  Must  have  proficiency  in  JAVA,  JAVA 
Servlets,  JAVA  Server  Pages,  SQL,  XML,  Web 
Server,  JAVA  Script,  HTML,  and  DHTML. 

Siemens  Health  Services  specializes  in  develop¬ 
ing  clinical,  financial,  and  management  solu¬ 
tions  that  support  leading  health  providers 
across  the  continuum  of  care.  As  an  integral  part 
of  our  organization,  you'll  enjoy  highly  competi¬ 
tive  compensation,  including  a  wide  array  of 
benefits,  and  professional  development  oppor¬ 
tunities. 

Isn’t  it  time  you  took  a  closer  look? 

FAX:  (610)219-8266 
Email:  human.resources@smed.com 
Source  Code:  RADMCPW00G 
www.smed.com/careers 

Equal  Opportunity,  Affirmative  Action  Employer. 


Sr.  Web  Developer  -  At  Quest 
Diagnostics  Inc,  we’ve  become 
the  nation’s  most  respected 
name  in  diagnostic  testing  by 
focusing  on  integrity,  innovation 
and  quality.  We've  created  an 
environment  where  dedicated 
professionals  can  learn,  grow 
and  advance  -  all  in  an  atmos¬ 
phere  of  pride.  We're  currently 
seeking  a  Sr.  Web  Developer 
to  be  based  in  Lyndhurst,  NJ. 
Candidate  will  design  database 
models,  business  and  presenta¬ 
tion  logic,  research  and  develop 
complex  web  applications.  Re¬ 
quirements:  Bachelor’s  degree  in 
Computer  Science,  Electronics, 
or  related  field,  3  years  experi¬ 
ence  in  OOAD/OOP,  RDBMS, 
transactional  middleware  or  web 
application  servers.  Knowledge 
of  3-tier  architecture  and  devel¬ 
opment  of  complex  web  applica¬ 
tions  and  corporate  web  sites 
also  required.  EOE/M/F/D/V. 
Please  add  source  code:  SWD- 
JG  and  forward  your  resume  to: 
Email:  questdiag@alexus.com; 
Fax:  877-588-9942  or  mail  to: 
Quest  Diagnostics  Incorporated, 
RO.  Box  3597,  Scranton,  PA 
18505. 


Full-time  Project  Manager  of 
Accounts.  Document  &  manage 
project  plans,  scope,  objectives 
&  timeline  of  various  projects  for 
assigned  accounts.  Supervise  & 
direct  project  team  members. 
Responsible  for  direct  communi¬ 
cations  w/ clients,  monitor  analysis 
&  evaluations  regarding  clients 
business  &  technical  requirements 
to  insure  quality  of  the  imple¬ 
mentation  &  customer  satisfaction. 
Work  w/  Visual  Basic,  C,  C++, 
SQL  Server,  MS  Access,  Oracle, 
Sybase  &  Cold  Fusion.  Must 
have  a  Bachelor’s  degree  in  CS, 
Computer  Engineering  or  related 
field.  Must  have  2  yrs.  exp.  in  job 
offered  or  position  w /  same 
duties.  Salary:  $60,000.  Send 
resume  to  Betsy  Moya,  Serna, 
701  Waterford  Way,  Suite  300, 
Miami,  Florida  33126. 


IT  SUPPORT  ENGINEER: 
Designs,  develops  and  main¬ 
tains  software  for  LI  NX  data 
collection  terminals.  Assembles 
and  maintains  PC  hardware 
including  POS  and  TPOS  sys¬ 
tems  (pole  displays,  receipt 
printers,  scanners  and  network). 
Installs  and  supports  ICVERIFY 
multi-user  credit  authorization 
service.  Designs,  develops  and 
maintains  hardware,  software 
for  RF  data  collection  systems. 
Designs,  develops  and  main¬ 
tains  applications  used  in  retail 
stores  and  back-office  systems 
utilizing  Visual  Basic  6.0,  Crystal 
Reports  8.0  and  relational 
databases.  Provides  bilingual 
(Spanish-English)  "Help  Desk" 
support  for  stores  and  support 
center  users,  including  off-hours 
on-call  support.  Job  is  in  Boca 
Raton,  FL.  40  hrs.  weekly,  9-5PM, 
$88,000.00/yr.  Bachelor's  degree 
or  equivalent  in  Systems  Engi¬ 
neering  or  related  field  and  2 
years  experience  in  job  offered. 
Fax  resume  to  99e  Stuff,  LLC., 
Attention  Russ  Field  (561)  999- 
0515 


SOFTWARE  ENGINEER 

The  Software  Engineer  shall 
perform  systems  architecture, 
systems  analysis  and  design, 
Internet  technologies,  program¬ 
ming,  programming  languages, 
database  designs,  data  modeling, 
database  programming,  Java 
and  C++.  Must  have  a  minimum 
of  a  Masters  Degree  in  Engineer¬ 
ing  Science,  Computers  or  related 
experience;  will  accept  Bachelor’s 
Degree  plus  five  years  experience 
as  described  above. 

Salary  $68,000.00  per  year, 
full  time,  plus  standard  benefit 
package. 

Send  two  copies  of  letter  of 
application  and  resume  to: 

Job  Order  #  2001-828 
Post  Office  Box  989 
Concord,  NH  03302-0989 


Py?  GiUetfo 

k _ *4  Company 

INFORMATION 
TECHNOLOGY 
.  .  .  .  OPPORTUNITIES 

The  Gillette  Company  is  the 
world  leader  in  more  than 
a  dozen  consumer  product 
categories.  Global  World  Class 
operations  are  increasingly 
dependent  on  Information  Tech¬ 
nology.  Exciting  opportunities 
exist  in  global  business  process 
integration  initiatives.  We  are 
currently  seeking  the  following 
highly  qualified  professionals  to 
join  the  Gillette  IT  team  in  the 
Boston  area. 

The  following  positions 
commonly  require  a  Bachelor’s 
degree  (or  equivalent)  in 
Computer  Science,  MIS, 
Business  Admin.,  or  similarly 
relevant  field,  and  3-5  years 
relevant  experience. 

!  Staff  Programmer  Analysts 

!  (SAP)  Staff  Basis  Adminis- 
trators/Con-figuration- 
Integration  Specialists/ 
Application  Developers 

!  Data  Warehouse  Architects/ 
Developers/Database 
Administrators 

!  Telecommunications 
Analysts 

Starting  salaries  range  from 
$56,100  to  $119,000  per  year, 
together  with  paid  vacation, 
medical,  dental,  life  and 
disability  insurances,  and  other 
industry-competitive  benefits. 

Please  mail  /  email  resume  to: 
The  Gillette  Company,  Prudential 
Tower  Building,  Boston  MA 
02199-8004  ATTN:  Elizabeth 
McFarlen,  Senior  Human 
Resources  Representative 
Email:  www.Gillette.Corn. 

The  Gillette  Company  is  an 
equal  employment  opportunity 
employer 


Network  Manager 
(New  York,  NY) 

Royalblue  financial  corporation, 
a  leading  supplier  of  global  trading 
software  with  offices  in  New  York, 
London,  Frankfurt  and  Tokyo,  re¬ 
quires  a  fidessaNet  Network 
Manager.  Royalblue  has  devel¬ 
oped  the  fidessa  trading  platform 
to  provide  the  most  complete 
range  of  applications  available 
for  trading  cash  equities  across 
the  world's  markets.  Responsi¬ 
bilities  include: 

•  Network  design,  installation  and 
support; 

•  Managing  mid-to-large  (500+ 
node)  network; 

•  Cisco  router/switch  configuration; 

•  Network  management  applica¬ 
tions 

Applicants  will  have  a  Bachelor 
of  Science  degree  in  Telecom¬ 
munications,  Engineering  or 
a  closely  related  field  and  expe¬ 
rience  with  engineering  and 
integrating  connectivity  to  Equities 
Trading  Exchanges  (eg  NYSE, 
NASDAQ)  &  ECN's  (eg  Island, 
Archipelago). 

Certifications  Required: 

•  CCNP  (Cisco  Certified  Network 
Professional); 

•  CCIE  (Cisco  Certified  Internet¬ 
working  Expert),  or  actively 
pursuing; 

•  MCSE  (Microsoft  Certified 
Systems  Engineer) 

•SUN  Solaris  certified,  or 
actively  pursuing. 

Apply  to  Royalblue  Financial 
Corporation,  17  State  Street, 
New  York,  NY1 1 0004,  Attn:  Human 
Resources  (NM). 


Consulting  comp,  in  NJ  req.  for 
its  ongoing  conversion  Projects 
a  System  Analyst  w/BS  Deg.  or 
its  equivl.  &  2  yrs.  exp.  of  design 
exp.  in  Financial/Accounting 
packages.  Candidate  should 
have  req.  skills  on  the  AS/400/ 
QS/400/SYNON  4E/JD  Edwards 
&  Oracle  Platform. 

Emolmts.,  is  based  on  edu.  & 
exp.  Travel  &  relocation  req.  to 
unanticipated  client  sites.  Send 
resumes  to:  Attn  RECRUITER, 
TRANSWORLD  INFO.  SYS¬ 
TEMS,  Inc.,  33  WOOD  AVE.,  7 
FL.  ISELIN,  NJ  08830 


InfiniSwitch  is  a  leader  in  Infini¬ 
Band  switching  technology  for 
data  centers.  We  are  currently 
seeking  Software  Quality  Assur¬ 
ance  Engineers.  Our  Software 
Quality  Assurance  Engineers 
will  work  with  the  InfiniBand 
specifications  and  with  input 
from  other  engineering  team 
members  to  isolate  and  expose 
system  and  sub-system  problems 
and  develop  resolutions.  They 
will  also  develop  and  execute 
test  plans  and  cases  required  to 
fully  test  and  qualify  Infiniband 
Switch  products,  and  conduct 
software  integration  testing, 
load/performance  testing  and 
install  Operating  Systems  and 
Networks.  Requirements  include 
a  MS  in  CS  or  closely  related 
and  two  years  experience  as 
Software  Quality  Assurance 
Engineer  (or  will  accept  BS  in 
CS  and  five  years  experience, 
two  of  which  are  in  QA).  Also 
required  is  high  degree  of  profi¬ 
ciency  working  with  following: 
Linux  or  Windows  2000  operating 
systems;  Network  switches,  fibre- 
channel  SAN  components,  or 
SNMP  Management  testing;  and 
application  load/artificial  traffic 
load  generation,  test  automation, 
or  performance  testing.  Interested 
applicants  may  send  their 
resume  to  Human  Resources, 
InfiniSwitch  Corporation,  134 
Flanders  Road,  Westborough, 
MA  01581.  F  508-870-3146. 


Several  computer  related 
positions  available  for  a  large 
communications,  marketing 
and  distributing  company. 
Degree,  technical  skills  & 
experience  vary  per  position. 
Send  resume  to  Ernie  Mueller, 
CMD  Services,  Inc.,  3060 
Premiere  Parkway,  Duluth, 
GA  30097. 


Kama  Consulting  Inc. 

TOP  SS's,  W2  or  1099 

We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 
Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP,  Delphi/VB,  Windows  NT 

Send  your  resume  to 
Rod  McFadden 
Kama  Consulting 
Fax:201-934-7166 
EmaikKamaco®  aol.com 


Programmer/Analyst  (4  openings): 
Design,  test,  code,  implement 
and  maintain  for  internal  and 
external  web-based  3-tier  appli¬ 
cation  architecture  projects  using 
HTML,  J2SE,  Java  SERVLETS, 
XML,  EJB,  Apache-JServ,  Java¬ 
script.  Req.  B.Sc.  or  its  foreign 
degree  equivalent  in  C.  Sci.,  EE, 
or  other  related  field  w/  at  least  2 
yrs.  exp.  in  job  offered.  Resume 
to:  HR  Manager  (job  code 
CW0102),  Ptek  Holdings,  3399 
Peachtree  Rd.  N.E.  Ste  600, 
Atlanta,  GA  30326 


Software  Engineer  (Melrose  Park, 
PA)  Programming  in  .NET,  VB / 
ASP+,  MTS,  Tuxedo,  CDO, 
T-SQL.  Maintains  SQL,  Exchange, 
IIS  Servers.  Designs  &  Develops 
applications  like  HRMS,  Airline 
Ticketing,  EBiz  Medical  Soft¬ 
ware.  Prepares  Technical  Project 
Proposals.  Fax  resume  21 5-782- 
2083  Ref.  DD. 


Sr.  Software  Eng’rs:  Dsgn,  dvlop 
&  implement  web-based  sw 
applica'n  w/ASP,  SQLServer 
2000, 7.0&6.5,  ADO,  JavaScript, 
VBScript,  DHTML,  HTML;  Dsgn 
DB  &  frontend  for  applic'n  w/ 
SQL,  Oracle8.x,  &  convert  DB 
from  DB2/Oracle  into  SQLServer- 
based.  40h/w,  8-5,  BS  in 
computer-related  field/foreign 
equivalent,  &  5  yr  wk  exp.  in  job 
offered  or  in  any  other  position 
involv’g  ASP,  DB2/Oracle,  & 
SQLServer.  Resume  to  L.  Ward, 
Best  Software,  Inc.  888  Exec.  Ctr 
Dr.  W,  #300,  St.  Pete,  FL33702, 
or  at  laurie.ward  @  bestsoftware. 
com  fax:  727-578-2178 


Software  Engineer  (Melrose  Park, 
PA)  Analyze,  design,  develop, 
implement  programs  for  com¬ 
mercial  &  financial  applications. 
Uses  VB  6. 0/5.0,  Oracle  31/8.0, 
SQL+,  PL/SQL,  web  technologies 
COM,  DCOM,  MTS,  ActiveX,  VB 
Script  DHTML.  BS  Comp.  Sci./ 
Eng.  Fax  resume  215-782-2083 
Ref.  RM. 


PRODUCT  MANAGER  (INTER¬ 
NET),  U.K.  &  EUROPE  ISSUES 
New  York,  NY),  define  Product 
ision  &  Direction  For  All 
Company  Products  (Internet  & 
Connectivity  Solutions)  in  UK 
and  Europe:  Act  as  primary  point 
of  contact  for  UK  sales  and 
marketing  teams;  Oversee 
market  analysis  and  oversee  ail 
product  development  initiatives 
for  region;  act  as  an  interface 
between  US  product  manage¬ 
ment  and  UK/Europe.  Bachelors 
Degree  in  Business  Administra¬ 
tion/Economics,  1  year  experi¬ 
ence.  40  hours  per  week,  9:00  AM 
to  5:00  PM.  Send  resumes/letter 
to:  HR  Dept.,  Globix  Corporation, 
1 39  Centre  Street,  New  York,  NY 
10013. 


Senior  Database  Administrators: 
Newton,  MA  office  needs  expe¬ 
rienced  individuals  for  perfor¬ 
mance  monitoring,  tuning  and 
testing.  Send  resumes  to:  C. 
Wyzga,  EIS-CW02-SDBA,  Eagle 
Investment  Systems,  65  LaSalle 
Rd.,  W.  Hartford,  CT  06107. 
EOE/F/M/V/D/Legal  workers 
only  please. 


Full-Time  IMC  Senior  Database 
Consultant.  Responsible  for 
interacting  with  client  managers, 
integrators  and  users  regarding 
functional  aspects  of  assigned 
projects.  Identify  client's  business 
requirements,  determine  en¬ 
hancements,  create  functional 
design  specifications,  and  provide 
change  management  guidance 
working  with  BSCS,  Gupta/ 
Centura,  Oracle,  Unix,  C,  PL/ 
SQL,  Visual  C++,  Visual  Basic, 
Visual  Fox  Pro,  MS  SQL,  Access 
and  TCP/IP.  Assist  clients  with 
conversion  strategies  and  plans 
and  resolve/troubleshoot  all  con¬ 
version  issues.  Develop  testing 
strategies,  plans  and  analyze 
codes  to  determine  database 
population  and  defects.  Must 
have  Bachelor's  degree  in  Com¬ 
puter  Science,  any  Engineering 
discipline  or  related  field.  Foreign 
degree  equivalent  accepted. 
Must  have  4  yrs.  exp.  in  job 
offered  or  position  w/  same  duties. 
Salary:  $66,000.  Send  resume  to 
Betsy  Moya,  Serna,  701  Waterford 
Way,  Suite  300.  Miami,  Florida  [ 
33126. 


Systems  Analyst  needed  for 
Miami  computer  sales  and 
export  co,  to  review  computer 
system  capabilities,  workflow, 
and  scheduling  limitations.  Min 
req.  4  yrs  exp.  Send  resumes  to 
TWC  The  Wise  Computer,  Inc. 
P.O.  Box  226438  Miami,  FL 
33122. 


Exp'ed  Prog/Sys  Analysts,  Net¬ 
work  Engineers,  DBAs  and  S/W 
Engineers  required  for  branch 
locations  in  Santa  Clara,  CA,  Mt. 
Laurel  NJ,  Conshohocken,  PA. 
Skill  sets  -  C,  C++,  Java,  HTML  on 
UNIX/Windows;  Visual  Basic, 
Visual  C++,  Power  Builder;  Oracle, 
PL/SQL,  Pro'C;  UNIX,  Windows 
2000/NT  Sys.  Admin.  Require  BS i 
MS  in  CS/Engg/Math/Business/ 
Science  (or  its  foreign  equiv  and/ 
or  equiv.  in  education  and  exp.) 
ArHelevant  exp.Travel/Relocation 
required.  Salary  commensurate 
with  exp.  Resumes  to:  HR,  Fourth 
Technologies,  27  Roland  Avenue, 
STE  B,  Mount  Lourel,  NJ  08054. 
Indicate  on  resume  the  branch 
office  you  are  applying  for. 


e-lite  companies 
emerging  companies 
e-ssential  companies 
e-normous  opportunities 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  test, 
integrate  and  implement  appli¬ 
cation  software  using  object 
oriented  Techniques,  Java, 
Websphere,  J  Builder,  JSP,  XML, 
XSLT,  XPATH,  XLINK,  DB2, 
Oracle,  Ant,  Resin  and  Tapestry. 
Require:  BS  Degree  &  5  years 
of  Experience  or  Masters  in 
Computer  Science/related  sub¬ 
jects  &  2  years  of  Experience. 
Salary:  $50-60K.  Fax  resumes  to 
770-973-0706  or  email  To  ameen 
©software  superheroes.com 
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Programmer  Analyst  to  analyze, 
research,  design  and  develop 
scientific  computer  applications 
using  statistical  software  such  as 
SAS,  SPSS  and  languages  such 
as  C,  C++  and  Oracle  Databases 
with  PL/SQL  under  Unix,  VAX/ 
VMS  platforms.  Gather  user  and 
technical  specification  to  maintain 
scientific  applications.  Require 
BS  in  sciences,  computer  science 
or  engineering  (any  branch)  and 
2  years  of  experience  in  software 
development.  Competitive  salary. 
Some  travel/relocation  required. 
Send  Resumes  to:  UNILINX, 
4625  Alexander  Drive,  Suite 
110,  Alpharetta,  G A  30022. 


You  can 
find  a 
better 

JOB 

with  one 
hand  tied 
behind 
your  back. 


Just  point  your 
mouse  to  the 
world’s  best 
IT  careers  site. 

Brought  to 
you  by 

Computerworld, 
Info  World  and 
Network  World. 

Find  out  more. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley, 
1-800-762-2977 


Where  the  best 
get  better 


CC  Phila.  Co.  seeks  a  Software 

Engr./ETL  Specialist.  BS  in  Engr. 
req,  along  with  min  5  yrs,  exp.  in 
software  dev,  expert  knowl.  in 
Data  Warehousing,  SQL,  MS 
Access.  SQL  Server,  Oracle 

RDBMS,  relational  &  dimensional 
data  concepts,  Win  NT,  exp.  with 
ETL,  query  &  analys.  tools  such 
as  Cognos  DecisionStream, 
Transformer.  Impromptu  &  Power 
play.  Send  resumes  to:  Box 
58034,  Phila,  PA  19102,  Attn: 

Dave  Conrad.  EOE/AA. 

Jr.  Programmer.  Assist  in  design 

&  dev.  of  s/w  sys.  inc.  functional 

&  tech,  specs.  Conduct  needs 

analysis.  Assist  in  developing 

sys.  procedures,  docs,  coding, 

&  testing  progs.  Req.:  BS  in 

Computer  Eng.  or  Computer 

Sci.  40-hr  wk.  Job/Interview  Site: 

Diamond  Bar,  CA.  Send  resume 

to  MTSI,  Inc.  P.O.  Box  #207, 

1142  S.  Diamond  Bar  Blvd., 

Diamond  Bar,  CA  91765. 

Computer  Professional  needed 
w/exp  in:  Oracle  Tools,  Oracle 
enterprise  Manager,  Network 
Manager,  Developer  Suite,  Export/ 
Import,  Oracle  Application  Server, 
Microsoft  IIS,  RMAN,  SQL'Plus, 
ERWIN,  SQL’Net,  PUSQL,  SQL 
•Navigator,  SQL’Loader,  C,  C++, 
Java,  Javascript,  PB,  COBOL, 
CICS,  DB2,  VS  AM,  UNIX 
Administration,  Sun-Solaris  Ad¬ 
ministration,  MS  Windows/NT. 
Apply  to:  Prosoft  Consultancy 
Services,  Inc.,  15310  Amberly 
Dr,  Suite  250-12,  Tampa,  FL 
33647.  No  in  person  resumes/ 
interviews,  only  respond  by  mail 
or  e-mail. 

Software  Engineers 

Automated  Power  Exchange, 
located  in  Santa  Clara  is  seeking 
Software  Engineers  possessing 
MS/BS  or  eqiv.  and/or  relevant 
work  exp.  Work  exp.  with 
RDBMS  +  SQL,  MS  SQL  Server 
and  one  or  more  of  the  following: 
Javascript,  VBScript,  ASP,  VB 
and  XML.  Exp.  developing  com¬ 
mercial  applications  and  dealing 
with  settlements  in  the  power 
industry  desired.  Must  be  willing 
to  travel  and  relocate  as  required 
in  the  U.S.  Mail  resumes  to: 
Automated  Power  Exchange, 
do  HR,  5201  Great  America 
Parkway,  Suite  522,  Santa  Clara, 
CA  95054. 

Network  Administrator  needed 

for  Miami  Beach  computer  and 
electronic  sales  co.  to  monitor 

data  communications  network 

to  ensure  that  the  network  is 

available  to  all  system  users.  Min 
req.  2  yrs  exp.  Fax  resumes 

to  Sound  Connection  and 
Distributors,  Inc.  (305)  538-0881 . 

Junior  Programmer.  Assist  pro¬ 
grammers  in  developing  finance 

and  accounting  software  with  the 

use  of  database  and  spread¬ 
sheet  programming.  Requires 

a  B.S.  Computer  Science/Com¬ 
puter  Eng.  or  related  field.  40 

hour  work  week.  Send  resumes 

to  eMachines,  Inc.  14350  Myford 

Road,  Bldg,  100,  Irvine,  CA 

92606. 

Computer  Graphics  Designer  in 

NYC.  Masters  in  Communication 

Arts  or  related  with  concentration 

in  Computer  Graphics  or  related. 

Min.  1  yr.  exp:  designing  3D  ani¬ 
mated  moving  graphics  for  web 
pages;  maintenance  of  web 
graphics;  Access;  Photoshop 
5.0,  HTML,  DHTML,  JavaScript, 

HTML/Graphic  editors;  3D  design; 

40  hrs/wk  M-Fri  9-5.  Send  resume 

to:  Job  8,  P.O.  Box  5275,  New 

York,  NY  10185-5275. 

COMPUTER  APPLICATIONS 

ENGINEER.  Design,  code  &  test 

projects  in  client-server  tech., 

using  VC++,  VB,  Java,  Oracle, 

ASP,  SQL  Server  &  Visio.  Doc.  & 

manage  projects.  Req.:  Bach,  in 

Comp.  Science  Engr.  or  Elec¬ 
tronics/Electrical  Engr.  40-hr  wk. 

Job/lntvw  Site:  L.A.,  CA.  Send 

resume  to  Vikmere  Software, 

3723  Watseka  Ave.,  #9,  Los 

Angeles,  CA  90034. 

Computer  Systems  Engineer 
needed  for  Miami  Architecture 
co.  to  analyze  data  requirement 
and  plan  data  processing  system 
for  projected  workloads.  Min 
req.  4  yrs  exp.  Send  resumes  to 
Architectural  Design  Consortium, 
Inc.  P.O.  Box  370546  Miami, 

Florida  33137. 

SOFTWARE  ENGINEERS:  Re¬ 
sponsible  for  software  integration 
and  external  interface  develop¬ 
ment.  Use  combination  of  Oracle 
PL-SQL,  CASE  tools  and  Peo- 
pleSoft  under  Oracle  8.x  envi¬ 
ronment  to  develop,  create, 
modify  and  maintain  application 
software  and/or  utility  modules 
for  DoD  HRMS  application. 
64K-72K(F-T;  40hr/wk);  New 
Orleans,  LA;  B.S. Computer 
Science  (or  equivalency);  4  yrs 
experience  or  related  experience 
in  ERP  package  customization. 

Contact:  Kenneth  Burkhalter 
personnel  @  otisincl  .net 

Tel.:  (985)781-3892 

where  the  best  get  better 

1-800-762-2977 


JAK  International  Corp.,  is  a 
diversified  trading  firm  with 
operations  in  the  U.S.  and  over¬ 
seas.  Our  company  currently 
has  openings  for  the  following: 

Business  Integration  Analysts: 
Analyze  business  intelligence 
requirements  of  client  users  to 
automate  processing  in  the 
context  of  financial  reporting, 
supply  chain  integration,  and 
e-commerce  applications.  Inter¬ 
face  with  programmers  and  DBA 
in  design  and  implementation 
of  software  solutions.  Prepare 
technical  reports  for  detailed 
documentation  of  software 
change  management  procedures. 
Use  relational  databases  including 
Oracle  and  DB2.  Engage  in 
project  management,  business 
process  re-engineering,  and 
inter-company  electronic  data 
transactions  using  knowledge  of 
mainframe,  client-server,  and 
web-based  environments. 

Need  Master's  degree  in 
Computer  Science  or  Business 
Administration.  Need  1  +  years  of 
experience.  Send  your  resume 
to:  VP  Operations,  7322  S.W. 
Frwy.,  Suite  788,  Houston,  Texas 
77074  or  send  via  e-mail  to: 
careers@jakintl.com 


DATABASE  MANAGER 
Davenport  University  is  in  search 
of  a  highly  qualified  Database 
Manager.  Responsibilities  include 
operation  and  maintenance  for 
the  library  automation  system 
including  software  and  hardware 
upgrades;  design,  development 
and  maintenance  of  University 
web  page;  coordinate  and 
implement  systems'  security; 
and  maintenance  of  remote 
online  access  to  the  library 
automation  system  catalog,  the 
online  resource  databases  and 
network  access  to  the  library 
automation  system  databases 
utilizing  NT/Windows  2000,  Sun 
hardware  and  Sun  Solaris  UNIX 
operating  system  5,6,  Sun 
Solstice  disc  suite,  Sybase,  and 
Sequel  Server  systems. 
Candidates  must  have  a  Bachelor 
of  Science  degree  in  Computer 
Science  or  Business  Adminis¬ 
tration  with  coursework  in 
computer  information  systems. 
Candidates  must  also  have 
permanent  authority  to  work  in 
the  United  States. 

Send  resumes  to  Human 
Resources,  Davenport  Universi¬ 
ty,  415  East  Fulton,  Grand 
Rapids,  Ml  49503. 


Software  Development  Engineer 
-  Collins  &  Aikman  is  seeking  in¬ 
dividuals  with  specialized  skills 
in  Graphical  User  Interface  (GUI) 
software  development  for  the 
position  of  Software  Development 
Engineer.  A  Master’s  degree  in 
engineering,  computer  science 
or  related  field  is  required  for  this 
position,  as  well  as  one  year 
of  experience  developing  GUI 
software  features  using  X-Motif 
and  Java  programming  languages. 
Fax  or  mail  resumes  to:  Attn: 
Director,  Global  Acoustic  CAE 
Technology,  Collins  &  Aikman 
Corporation,  47785  West  Anchor 
Court,  Plymouth,  Ml  48170-2456. 
Tel:  734-207-7302;  Fax:  734-354- 
2220;  Email:  satha.raveendra 
@  colaik.com 


♦ 


Sr.  Systems  Engineer.  Design, 
prototype,  debug,  &  test  embed¬ 
ded  hardware,  radio  sys.,  & 
software;  perform  simulation, 
schematic  entry  &  PCB  layouts. 
M.S.  in  Elec.  Eng.,  Comp  Eng., 
or  rel.  field  &  5  yrs.  rel.  exp.  or 
equiv.  educ.  &  exp.  5  yrs.  exp.  to 
include:  A/D  &  D/A  conversion; 
DSP  sys.  hardware;  Assembly; 
C/C++;  in-circuit  emulators  & 
logic  analyzers;  PCB  layout 
tools.  Send  apps.  to  Marv  Van 
Wyk,  Vermeer  Mfg.  Co.,  1210 
Vermeer  Rd  East,  Pella,  Iowa 
50219. 


Manager  of  Information  Services 
&  Operations.  Manage  network 
and  computer  infrastructure, 
web  site,  and  user  support;  create 
and  implement  operational 
procedures.  Prepare  contingency 
plan  for  e-mail  server,  financial 
applications  server,  RDBMS 
server,  and  Internet.  Evaluate 
and  implement  Internet  and  LAN 
security.  Manage  network 
cabling  infrastructure  based  on 
AT&T  standards;  monitor  LAN 
and  WAN  performance.  Manage 
and  troubleshoot  high-speed 
modems  and  switches  for  leased 
line,  T1  lines,  etc.  Install,  trou¬ 
bleshoot,  and  monitor  software 
and  hardware  based  routers 
connecting  overseas.  Design 
network  connection  between 
European,  U.S.  and  Asian  offices, 
install,  manage,  and  troubleshoot 
remote  connectivity  for  European, 
South  American,  and  Asian 
Offices.  Plan  for  new  Sun-based 
servers  to  run  RDBMS  system; 
install  connectivity  from  local  to 
remote  client.  Must  have  Bache¬ 
lor’s  degree  in  Computer  Science 
or  related,  plus  four  years  expe¬ 
rience.  Must  be  able  to  design 
networks  over  T1  and  leased 
lines,  provide  network  manage¬ 
ment,  security,  and  troubleshoot¬ 
ing;  use  IP  routing  technologies, 
gigabit  ethernet,  remote  access 
with  VPN  connectivity,  Check- 
Point  Firewall-1,  Cisco  Catalyst 
Switches,  VLAN,  and  Sun  Solaris. 
Must  have  knowledge  of  Asian 
and  European  telecommunica¬ 
tions  standards.  Send  resume 
with  cover  letter  to  Genetic  ID, 
Attn:  Jane  Pappin,  501  Dimick 
Drive,  Fairfield,  Iowa  52557. 


Oracle  Computer  Applications 
Developer  (various  assignments 
as  position  evolves),  under 
supervision  of  supervisory 
personnel,  to  design,  develop, 
test,  implement  and  debug 
computer  software  applications  in 
Oracle  specific  technology 
including  writing  SQL  and  PL/SQL 
statements  manually,  and  grow 
with  Oracle  technology  as  it 
evolves  to  develop  cutting  edge 
Oracle  skill  set  commensurate 
with  the  technology  as  it  evolves 
utilizing  the  ability  to  write  SQL 
and  PL/SQL  statements  manual¬ 
ly  and  the  ability  to  grow  with  Or¬ 
acle  technology  as  it  evolves  (as 
evidenced  by  present  proficiency 
in  Oracle  7.X,  8.0  and  8.i).  Re¬ 
quires  Bachelors  or  equivalent 
level  degree  in  Computer  Sci¬ 
ence,  Math,  Physics  or  Engineer¬ 
ing  or  a  closely  related  field.  Qual¬ 
ified  applicants  must  presently  be 
eligible  for  permanent  employ¬ 
ment  in  the  United  States.  Suc¬ 
cessful  applicant  must  be  able  to 
perform  job  duties  on  date  of  ap¬ 
plication  and  be  able  to  pass 
Wonderlic  math  and  logic  and 
Achiever  business  skills  tests. 
Send  resumes  to  Mr.  Jeff  Knott, 
Employment  Manager,  TALX  Cor¬ 
poration,  1 850  Borman  Court,  St, 
Louis,  Missouri  631 46.  An  equal 
opportunity  employer. 


TECMAG  is  a  scientific  research 
and  technology  based  organiza¬ 
tion  specializing  in  manufacturing 
of  Nuclear  Magnetic  Resonance 
(NMR),  Nuclear  Quadrupolar 
Resonance  (NQR),  and  Magnetic 
Resonance  Imaging  (MRI) 
equipment  and  software  including, 
computer  systems,  scientific  and 
engineering  software,  and  data 
acquisition  systems.  We  are 
currently  looking  for  the  following: 

Software  Engineers:  Research, 
design,  develop,  and  maintain 
software  for  scientific  and  tech¬ 
nological  applications  including 
use  in  NMR,  NQR,  and  MRI 
applications.  Develop  and  direct 
system  procedures,  programming 
and  design  using  knowledge 
of  data  processing,  hardware 
interface,  display  graphics,  and 
Windows  NT/2000  GUI  applica¬ 
tions.  Utilize  strong  C++,  MFC, 
and  numerical  analysis  skills, 
including  advanced  scientific 
mathematical  algorithms,  and 
automation  skills.  Requires  a 
Master's  degree  in  Computer 
Science  and  1  +  years  of  experi¬ 
ence  in  position  offered. 

Send  Resume  to:  Gloria  at  6006 
Bellaire  Blvd.,  Suite  #117, 
Houston,  Texas  77081  or  send 
via  e-mail:  jobs@tecmag.com 


Computer/Info  Systems 

SENIOR  PROGRAMMER/ 
ANALYST 

We  are  a  privately  owned 
$50  billion,  AAA-Aaa  rated 
financial  institution  providing 
central  banking  services  for 
thrifts,  banks,  and  credit  unions. 
We  currently  have  an  excellent 
opportunity  available  for  a  Senior 
Programmer  Analyst.  Responsi¬ 
bilities  include  analyzing,  design¬ 
ing,  coding  &  implementing  soft¬ 
ware  systems,  programs  & 
applications  using  Microsoft 
Access,  Visual  Basic,  SQL  Server 
&  Microsoft  Windows  NT;  prepare 
detailed  project  plans  &  specifi¬ 
cations;  provide  technical  support; 
create  &  maintain  system  docu¬ 
mentation;  prepare  status  reports 
for  management;  act  as  project 
leader  on  specific  projects. 

We  require  a  Master's  degree 
in  Computer  Science  or  Infor¬ 
mation  Systems  required;  1  year 
experience  in  the  position  or 
1  year  as  Data  Analyst  and/or 
Programmer  Analyst  required. 
Related  occupation  must  include 
experience  in  analyzing,  design¬ 
ing,  coding  &  implementing  soft¬ 
ware  systems,  programs  and 
applications  using  Microsoft 
Access,  Visual  Basic  and  SQL 
Server.  Excellent  oral/written 
communication  skills. 

We  offer  a  competitive  salary 
and  comprehensive  benefit 
package  including  a  401  (k)  plan. 
Qualified  candidates  should 
send  resumes  with  cover  letters, 
including  salary  requirements  to: 
Human  Resources  Department, 
Federal  Home  Loan  Bank  of 
Chicago,  111  East Wacker Drive, 
Suite  800,  Chicago,  IL  60601, 
e-mail  hr@fhlbc.com  ,  or  fax  to 
(312)565-5812.  EOE  M/F/D/V. 


ECAL  Solutions  Inc.,  provides 
information  technology  consul¬ 
tation  services  with  highly  quali¬ 
fied  and  committed  professionals 
for  the  clients  to  optimize  and 
maximize  their  output.  We  are 
looking  for  the  following  posi¬ 
tions: 

Software  Engineers:  Research 
and  analyze  web  and  software 
applications.  Develop  and  ad¬ 
minister  the  e-commerce  appli¬ 
cations  in  Oracle,  DB2,  SQL 
Server,  and  Sybase  using 
Java.WebLogic,  JRun,  Jbuilder. 
XMLSpy,  Excelon  Stylus  and 
related  technologies  on  Windows 
and  UNIX.  Requires  a  Master’s 
in  Computer  Science  or  Engi¬ 
neering  or  related  field  and  1 
year  of  experience. 

Programmer  Analysts:  Design 
and  develop  client-server  appli¬ 
cations  using  Oracle  Financials. 
Customize  payable  order,  con¬ 
versions,  interfaces,  manage  new 
products  or  enhance  existing 
products  using,  VB,  SQL  Server, 
PERL,  ASP,  and  XML.  Analyze 
business  procedures,  solve 
problems,  redefine  and  convert 
data  to  a  programmable  form. 
Requires  a  Bachelor's  in  Com¬ 
puter  Science  or  Engineering  or 
a  related  field  and  2  years  of 
experience. 

Send  Resume  to:  HR,  ECAL 
Solutions  Inc.,  9207  Country 
creek  Drive,  Suite  #  207,  Houston, 
Texas  77036  or  via  e-mail  at: 
hr®  ecalsolutions.com 


Systems  Engineer 

Test  install  and  maintain  computer 
operating  systems;  monitor  and 
install  data  communication  lines; 
maintain  the  NT  infrastructure; 
develop,  implement  computer 
networking  plan;  test  and  imple¬ 
ment  Chinese  interface  of  the 
chips  of  elevators.  Master 
degree  in  computer  science  is 
required.  Send  resume  to  Mr 
Marvin  W.  Schumacher,  Schu¬ 
macher  Elevator  Company,  Inc., 
One  Schumacher  Way.  Oenver, 
IA  50622. 
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eCommerce  Software  Engineer  II 
-  Milwaukee,  Wisconsin  Re¬ 
searches,  designs,  and  develops 
eCommerce  applications.  Designs 
applications  to  meet  require¬ 
ments  specified  by  the  Web  To 
Team  Lead.  Designs  Class  and 
Sequence  Diagrams.  Facilitates 
Design  Reviews.  Facilitates  Code 
Review  for  her/his  own  work. 
Participates  in  Use  Case  devel¬ 
opment.  Performs  detailed  tech¬ 
nical  assessment  of  new  tech¬ 
nologies  and  platforms,  and 
recommends  direction  to  Software 
Engineer  Team  Lead  and  Web 
To  Team  Lead.  Performs  integra¬ 
tion  of  'Web'  applications  to 
various  Business  Systems  and 
the  integration  of  the  same 
Business  Systems  to  various 
Workbench1  processes.  Develops 
code  for  individual  components 
of  'Web',  'Workbench',  and  inte¬ 
gration  applications.  Designs 
user  interface  to  ensure  easy-to- 
follow  user  screens.  Builds  and 
executes  test  plans.  Participates 
in  content  generation  and  up¬ 
dates  to  the  eCommerce  solutions. 
Tracks  and  logs  time  spent  on  all 
activities  and  submits  weekly 
Status  Reports  to  Software 
Engineering  Team  Lead.  Other 
duties  may  be  assigned.  Re¬ 
quired  is  a  Bachelor  of  Science 
degree  in  Computer  or  Software 
Engineering  and  a  minimum  of 
one  (f )  year  post-baccalaureate 
work  experience  as  a  Software 
Engineer.  As  part  of  the  required 
previous  experience,  the  appli¬ 
cant  must  have  had:  experience 
in  the  formal  design,  development, 
implementation,  and  test  of 
software  systems  based  upon 
system  requirements;  and  expe¬ 
rience  with  the  following  soft¬ 
ware  platforms:  C/C++,  Visual 
Basic,  JAVA  ver  1 .1 ,  Websphere 
Application  Server,  XML  and 
ASP  modeling,  and  MS  Visual 
Modeler.  Must  have  proof  of 
legal  authority  to  work  perma¬ 
nently  in  the  United  States.  For 
consideration,  please  apply 
online  at  www.bradycorp.com. 
An  Equal  Opportunity  Employer. 


COMPUTER/IT 

H.R.  Organizational  Management 
Functional  Team  Member.  (Troy, 
Michigan).  Requires  a  Bachelor’s 
degree  or  equivalent  foreign 
education  in  computer  science, 
management  information  systems, 
business  administration,  or 
engineering  field,  and  2  years’ 
experience  in  the  job  offered 
or  2  years’  experience  in  imple¬ 
mentation  and  configuration  of 
global  organization  structures  in 
SAP  R/3  PI.R.  Organizational 
Management  module.  Must 
have  completed  one  full  life- 
cycle  of  SAP  R/3  implementation 
and  integration  testing.  Engage 
in  implementation  and  configu¬ 
ration  of  global  organization 
structures  in  SAP  R/3  H.R. 
Organizational  Management 
module.  Design  and  configure 
SAP  R/3  solutions  to  satisfy 
organizational  management 
requirements.  Engage  in  full 
life-cycle  implementation  and 
integration  testing  of  SAP  R/3. 
Develop  functional  specifications. 
Identify  gaps  between  SAP  R/3 
solutions  and  company  business 
requirements.  40  hrs./wk.  8:00- 
5:00.  Apply  with  resume  to 
Jennifer  McKenzie,  1450  W. 
Long  Lake  Road,  Troy,  Michigan 
48098. 


PEOPLE  WITH  THE  FOLLOW¬ 
ING  SKILLS  NEEDED  FOR 
ASSIGNMENTS  THROUGH¬ 
OUT  THE  USA.  ORACLE,  SY¬ 
BASE,  POWERBUILDER,  AS- 
400,  PROGRESS,  UNIX  SYS 
ADMIN,  NATURAL,  SQL/SER¬ 
VER,  JAVA,  INGRES,  SAS.  PLE¬ 
ASE  MAIL  RESUMETO  DIR.  RE¬ 
CRUITING,  Skillsoft  Incorporated, 
20283  State  Road  7,  Suite  300, 
Boca  Raton,  FL  33498,  U.S.A. 
www.skillsoftusa.com 


Programmer  Analyst  (multiple 
openings):  Plans,  develops, 
tests,  and  documents  computer 
programs.  Converts  project 
specifications,  using  flowcharts 
and  diagrams,  into  sequence  of 
detailed  instructions  and  logical 
steps  for  coding  into  computer 
language.  Analyzes,  reviews 
and  alters  program  to  increase 
operating  efficiency  or  adapt 
to  new  requirements  using  rela¬ 
tional  database  management 
system  (RDBMS)  and  related 
software.  One  year  of  experi¬ 
ence  in  job  offered  or  as  a 
computer  professional  required, 
including  one  year  of  experience 
using  1  of  A  as  follows:  Informix, 
Oracle,  FoxPro.  Sybase,  SQL 
Server,  Progress.  Work  involves 
extensive  travel  and  frequent 
relocation.  Bachelor’s  degree  or 
foreign  equivalent  or  equivalent 
combination  of  education  and 
experience,  in  one  of  several 
limited  fields:  Computer  Sci / 
Apps,  Eng.,  Chem.,  Math, 
Physics  or  scientific  or  business 
related  field.  Salary:  $67,000 
per/yr,  40  hrs/wk.,  8:00-5:00  p.m. 
Please  submit  resumes  to: 
Director,  Pittsburgh/Allegheny 
Co.  CareerLink,  ATTN:  JS 
Supervisor,  425  Sixth  Ave.,  Suite 
2200,  Pittsburgh,  PA  15219. 
Reference:  Job  Order  No.  WEB 
222444 


Programmer  Analyst  consulting 
positions  (multiple  openings) 
to  plan,  develop,  test,  and 
document  computer  programs, 
applying  knowledge  of  program¬ 
ming  techniques  and  computer 
systems.  Converts  project 
specifications,  using  flowcharts 
and  diagrams,  into  sequence  of 
detailed  instructions  and  logical 
steps  for  coding  into  language 
processableby  computer,  applying 
knowledge  of  computer  to  run 
and  test  programs.  Analyzes, 
reviews,  and  alters  program  to 
increase  operating  efficiency  or 
adapt  to  new  requirements. 
Must  travel  and  relocate  frequent¬ 
ly.  3-4  year  Bachelor's  degree 
or  foreign  equivalent  required. 
Candidates  must  have  one  year 
of  experience  in  the  job  offered 
or  as  a  computer  professional. 
Candidates  must  have  one  year 
of  experience  using  one  of  the 
following:  Informix,  Oracle,  Fox¬ 
Pro,  Sybase,  SQL  Server, 
Progress.  $67,000  per/yr,  40 
hrs/wk.  Please  submit  resumes 
to:  Fayette  County  Team  PA 
CareerLink,  ATTN:  JS  Supervisor, 
32  lowaStreet,  Uniontown, 
PA15401-3513,  Job  Order  #: 
WEB  222432 


Computer  Systems  Administrator: 
For  non-profit  educational 
assoc.,  design,  install  &  support 
LAN,  e-mail  system  &  website. 
Maintain,  update,  &  train  users 
for  iMIS  software;  maintain 
network  hardware  &  software; 
implement  network  security 
measures.  Req's:  B.S.  in  Comp. 
Sci.  or  related  field.  1  yr  exp.  in 
job  offered  or  1  yr  exp.  in  Comp. 
Sys.  Maintenance  or  Help  Desk 
Support.  Exp.  must  include 
troubleshooting  &  maintaining 
&  supporting  network-based 
applications.  Prof,  in  iMIS  soft¬ 
ware.  40hrs/wk.  Send  resumes 
to  Dr.  Klein,  423  Exton  Commons, 
Exton,  PA  19341. 


Multiple  openings  for  s/w 
Eng/Consultants,  Programmer 
Analysts,  Project  Leaders/ 
Managers,  Account/Product 
Manager,  Systems/Management 
Analysts,  Web  Masters/designers 
and  project  engineers.  Some 
positions  require  Bachelors  (or 
equiv.)  while  others  require 
Masters  (or  equiv.)  in  CS,  Engg, 
Math,  Bus  Admin  or  related  field. 
We  will  accept  the  foreign  equiv. 
of  req'd  edu.  and/or  its  equiv.  in 
edu  &  exp.  Exp  will  depend  on  po¬ 
sition.  Send  resume  to  JRD  Sys¬ 
tems,  42524  Hayes  Rd,  #  100, 
Clinton  Twp,  Ml  48038. 


Software  Engineer  consulting 
positions  (multiple  openings)  to 
design,  develop  and  implement 
computer  software  systems 
applying  principles  and  tech¬ 
niques  of  computer  science, 
engineering  and  mathematical 
analysis.  Analyze  software 
requirements  to  determine  fea¬ 
sibility  of  design  and  directs  soft¬ 
ware  system  testing  procedures, 
programming  and  documentation. 
Must  travel  and  relocate  frequently 
Bachelor's  degree  or  functional 
or  foreign  equivalent  is  required 
in  one  of  several  limited  fields: 
Computer  Science/Applications, 
Engineering,  Chemistry,  Math, 
Physics,  or  business  related 
field.  Candidates  must  have  six 
months  of  experience  in  the  job 
offered  or  as  a  computer  profes¬ 
sional.  Candidates  must  have 
six  months  of  experience  using 
one  of  the  following:  Informix,  Or¬ 
acle,  FoxPro,  Sybase,  SQL 
Server,  Progress.  $67,000 
per/yr,  40  hrs/wk.  Please  submit 
resumes  to:  Manager,  Washington 
County  Team  PA  CareerLink, 
MillcraftCenter,  Suite  150LL,  90 
West  Chestnut  Street,  Washing¬ 
ton,  PA  15301-4517,  Job  Order 
#:  WEB222425 


COMPUTER/IT 

SAS  Programmer.  Stamford,  CT. 
Perform  database  and  bio- 
statistical  analysis  and  manage¬ 
ment  through  the  development 
of  SAS  programs.  Duties  include 
creation  of  tables,  listings,  graphics 
and  derived  analysis  data-sets 
for  final  study  reports  of  clinical 
trials.  Programmer  will  validate 
his  own  programming  code  and 
perform  second  programmer 
validation  of  other  programmers' 
programs.  Duties  will  also  include 
assistance  in  the  development 
and  validation  of  integrated  data¬ 
bases  and  the  related  tables,  list¬ 
ings  and  graphs  for  integrated 
safety  and  efficacy  summaries. 
Requires:  B.S.  or  foreign  equiv¬ 
alent  in  scientific,  mathematical 
or  computer-related  discipline.  2 
yrs.  of  exp.  in  job  offered  or  as 
Programmer  Analyst.  Experience 
which  may  have  been  obtained 
concurrently  must  include:  2  yrs. 
of  exp.  of  Statistical  (SAS) 
Programming  experience  within 
the  Pharmaceutical  industry. 
EOE.  40hrs/wk.  Send  resume 
(no  calls)  to  Mr.  Keith  Shelly, 
Managing  Partner,  Smith  Hanley 
Consulting  Group,  Inc.  1025 
Greenwood  Blvd,  Suite  231, 
Lake  Mary  Florida  32746. 


SAP  ANALYST  for  Syndein 
Consulting  Services  Inc.,  a 
computer  consulting  Enterprise 
Resources  Software  company, 
in  Las  Vegas,  NV.  Various  antici¬ 
pated  job  sites  throughout  the 
U.S.  Fax  resume  attention  Ken 
Sidley  at  (530)  327-7949. 


fl^^^^WAnalysts/Englneers 
needed.  Andrews  Resources, 
Inc,  a  Waukegan,  IL  based 
company  is  seeking  qualified 
candidates  possessing  MS/BS 
or  equivalent  and/or  relevant 
work  experience.  Work  with  2 
or  more  of  the  following:  Java, 
J2EE,  Weblogic,  Internet 
programming,  OOAD,  Oracle 
DB.  Fwd.  resume  to:  HR  at 
Andrews  Resources,  Inc.,  2708 
Grand  Avenue,  Waukegan,, 
Illinois  60085. 


Programmer  Analyst  consulting 
positions  (multiple  openings)  to 
analyze  user  requirements, 
procedures,  and  problems  to 
automate  or  improve  existing 
systems  and  review  computer 
system  capabilities,  workflow, 
and  scheduling  limitations. 
May  analyze  or  recommend 
commercially  available  software. 
Analyze  science,  engineering, 
business,  and  other  data 
processing  problems  for 
application  to  electronic  data 
processing  systems.  Must  travel 
and  relocate  frequently.  Bach¬ 
elor's  degree  or  equivalent 
combination  of  education  and 
experience  is  required  in  one  of 
several  limited  fields:  Computer 
Science/Applications,  Engineer¬ 
ing,  Chemistry,  Math,  Physics,  or 
scientific  or  business  related 
field.  Candidates  must  have 
one  year  of  experience  in  the  job 
offered  or  as  a  computer  profes¬ 
sional.  Candidates  must  have 
one  year  of  experience  using 
one  of  the  following:  PeopleSoft, 
SAP,  Baan,  J.D.  Edwards,  Oracle 
Applications/Financiais/  Manu- 
facturing/HR.  $100,000  per/ 
yr,  40  hrs/wk.  Please  submit 
resumes  to:  JS  Supervisor, 
Greene  County  Team  PA 
CareerLink,  4  West  High  Street, 
Waynesburg,  PA  15370-1324, 
Job  Order#:  WEB  222436 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  analyze,  develop,  test 
and  implement  new  systems  and 
improve  existing  systems  on 
Windows  and  UNIX  based 
platforms  using  JAVA  and 
Progress  4GL;  develop  in-depth 
knowledge  of  business  functions, 
systems  and  technology  for  use 
in  consulting  both  clients  and 
Information  Systems  team  mem¬ 
bers;  coach  and  train  junior  staff. 
Require:  *A  M.S.  degree  in 
Computer  Science,  Information 
Systems,  or  a  closely  related 
field  plus  one  year  of  previous 
experience  in  the  job  offered  or 
information  systems  design 
and/or  development.  "A  B.S. 
degree  or  foreign  degree  equiv¬ 
alent  in  Computer  Science,  In¬ 
formation  Systems,  or  a  closely 
related  field  and  five  (5)  years  of 
progressive  experience  in  the 
job  offered  or  in  information 
systems  design  and/or  develop¬ 
ment  will  be  accepted  in  lieu  of  a 
M.S.  degree.  **Prior  experience 
must  include  1  year  Progress. 
Competitive  salary  &  benefits,  8 
am  to  5  pm,  M-F.  Send  resume 
to:  Corporate  HR,  EarthLink, 
Inc.,  1375  Peachtree  St.,  Level 
A,  Atlanta,  GA  30309  (No  Phone 
Calls  Please) 


PROGRAMMER:  Design  flow¬ 
charts,  convert  data  &  write 
program;  enhance  hotel  database 
using  Word  Star  Pro.,  dBadelV, 
Pascal,  C,  HTML  for  Web  Pro¬ 
gramming,  &  Spreadsheet  using 
Lotus  1  -2-3.  Re.:  2  yrs.  exp.  in  job 
off.  or  3  yrs.  as  Tech.  Support 
Mgr.  Resume  to:  Hospitality 
venture  Lavista,  2180  Northlake 
Pkwy,  Tucker,  Georgia  30084. 


Senior  Database  Administrator 
-  Waltham,  MA. 

Experience  must  include  DBA 
and  design  of  client-server 
applications,  deploying  Oracle 
Parallel  Server  and  Enterprise 
Manager,  SQL'Plus,  PL/SQL 
on  Windows  NT  and  UNIX  plat¬ 
forms.  Attractive  compensation 
package.  Send  resume  to  Human 
Resources,  Beyond  Genomics, 
Inc.,  40  Bear  Hill  Road, 
Waltham,  MA  02451,  work© 
beyondgenomics.com,  781-895- 
1119  (fax).  NO  AGENCYS 
PLEASE.  NO  PHONE  CALLS 
PLEASE. 


Senior  Software  Engineers 
(multiple  openings):  Design, 
develop  and  implement  software 
systems  to  determine  feasibility 
of  design  and  directs  software 
testing  procedures,  programming 
and  documentation  using  rela¬ 
tional  data  base  management 
systems  (RDBMS).  Work  involves 
extensive  travel  and  frequent 
relocation.  Must  have  six  months 
of  experience  in  the  job  offered 
or  as  a  computer  professional 
and  must  have  six  months  using 
1  from  A  as  follows:  A)  Informix, 
Oracle,  Foxpro,  Sybase,  SQL 
Server,  Progress.  A  Master’s 
degree  in  one  of  several  limited 
fields:  Computer  Sci/Apps,  Eng., 
Chem.,  Math,  Physics  or  a 
scientific  or  business  related 
field.  Will  accept  Bachelors 
degree  with  five  years  of 
progressive  experience  as 
computer  professional.  Salary  is 
$77,000  per/yr,  40  hrs/wk., 
9:00-5:00  p.m.  Please  submit 
resumes  to:  Manager,  West¬ 
moreland  County  CareerLink, 
300  East  Hillis  Street,  Young- 
wood,  PA.  15697-1808.  Please 
reference  Job  Order  No.:  WEB 
222413. 


Geomatrix  Services,  Inc.  has 
openings  for  Civil  Engineers  for 
job  locations  in  New  Jersey  and 
elsewhere,  with  at  least  two 
years  of  civil  engineering  experi¬ 
ence.  Job  Duties:  Plan,  design, 
and  maintain  several  drawings 
for  industrial  and  recreational 
buildings,  schools,  and  family 
housing  units;  estimate  personnel 
needs  and  schedule  work  to 
meet  completion  dates,  and 
technical  specifications;  design 
structures,  and  prepare  detailed 
drawings  and  estimates.  Prepare 
base  line  schedule  in  PRIMAV- 
ERA  software,  update  all  activities 
weekly  to  monitor  and  record 
progress  of  the  project,  and  pre¬ 
pare  shop  drawings  and  drawn 
submittal  drawings  using  Auto¬ 
CAD.  Positions  require  a  Masters 
degree  in  civil  engineering. 
Excellent  Pay  and  Benefits.  Mail 
resume  to:  HR  Dept.,  Geomatrix 
Services,  Inc.,  9  Schoolhouse 
Lane,  Somerville,  New  Jersey 
08876. 


Software  AG,  Inc.  is  recruiting  for 
all  types  of  Systems  Analysis 
Consultants,  Staff  Consultants, 
Project  Managers/Leaders, 
System/Software  Engineers, 
Quality  Assurance  and  R&D 
Specialists,  Programmer/Analysts 
and  other  computer  science 
professionals. 

We  have  offices  throughout  the 
U.S.  including:  Reston,  VA;  Atlanta; 
Chicago;  Dallas;  Sacramento, 
San  Ramon  and  Irvine,  CA;  and 
Denver. 

Resume  to:  Software  AG,  Inc., 
ATTN:  HR,  Computerworld Ad, 
11190  Sunrise  Valley  Dr.,  Reston, 
VA  20191.  Fax:  703-391-8340. 
For  additional  information,  find  us 
under  Computer,  or  visit  our  Web 
site:  www.softwareagusa.com. 


SENIOR  SOFTWARE  ENGI-I 
NEER  to  lead  ateam  in  the  design, 
development,  testing  and  imple¬ 
mentation  of  web-based  appli¬ 
cation  software  in  a  client/server 
environment  using  Oracle,  SQL 
Server,  HTML,  JavaScript,  TCL, 
Java,  JSP,  XML,  XSLT  and 
Vignette  under  UNIX,  SUN 
Solaris  and  Windows  operating 
systems;  Supervise  and  monitor 
junior  programmers  and  engi¬ 
neers.  Require:  B.S.  degree  in 
Computer  Science/Engineering, 
or  a  closely  related  field  with  five 
years  of  progressively  responsible 
experience  in  the  job  offered 
lor  as  a  Programmer/Systems 
Analyst.  Extensive  travel  on  as¬ 
signments  to  various  client  sites 
within  the  U.S.  is  required.  Com¬ 
petitive  salary  offered.  Apply  by 
resume  to:  Sophie  Mookerjie, 
President,  Software  Paradigms 
International,  Inc.,  3  Woodlawn 
Drive,  NE,  Marietta.  GA  30067; 
Attn:  Job  SS. 


Programmer  Analyst  (multiple 
openings):Design,  develop  and 
implement  software  systems  to 
determine  feasibility  of  design 
and  directs  software  testing 
procedures,  programming  and 
documentation  using  relational 
data  base  management  systems 
(RDBMS).  Work  involves  exten¬ 
sive  travel  and  frequent  reloca¬ 
tion.  Must  have  1  year  of 
experience  in  job  offered  or  as  a 
computer  professional  as  well  as 
1  year  using  1  of  the  following: 
A)  Informix,  Oracle,  Foxpro, 
Sybase,  SQL  Server,  Progress. 
Bachelors  degree,  or  functional 
or  foreign  equivalent,  in  Computer 
Sci/Apps,  Eng.,  Chem.,  Math, 
Physics  or  a  scientific  related 
field.  Salary  is  $67,000  per/yr,  40 
hrs/wk„  9:00-5:00  p.m.  Please 
submit  resumes  to:  Manager, 
Indiana  Job  Center,  350  North 
Fourth  Street,  Indiana,  PA. 
15701-2000.  Please  reference 
Job  Order  No.:  WEB  222429 
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Privacy 

ney  general  about  its  privacy 
practices. 

In  each  settlement,  the  com¬ 
panies  were  required  to  make 
changes  to  their  business  prac¬ 
tices,  impacting  security  in  Eli 
Lilly’s  case  and  the  privacy 
practices  of  Toys  R  Us. 

There  are  some  worries  that 
privacy  laws,  particularly  in 
the  health  care  and  financial 
sectors,  may  encourage  private 
litigation. 

“Enforcement  is  an  issue  for 
us,”  said  Richard  Rosenhagen, 
privacy  officer  at  Good  Samar¬ 
itan  Hospital  Medical  Center 
in  West  Islip,  N.Y.,  particularly 
through  litigation.  “We  don’t 
know  what  kind  of  risks  we’re 
going  to  be  dealing  with.” 


The  FTC  is  clearly  empha¬ 
sizing  enforcement.  The  Bush 
administration  has  brought  a 
philosophical  shift  to  bear  on 
the  agency’s  approach  to  priva¬ 
cy  matters. 

During  the  Clinton  adminis¬ 
tration,  the  FTC  focused  on 
corporate  data  collection  prac¬ 
tices  and  sought  privacy  legis¬ 
lation,  whereas  the  Bush  ad¬ 
ministration  is  targeting  the 
misuse  of  data. 

Accountability,  Trade-offs 

Howard  Beales,  the  FTC’s 
consumer  protection  chief, 
said  at  the  International  Asso¬ 
ciation  of  Privacy  Officers  con¬ 
ference  here  last  week  that 
there  are  worthwhile  trade¬ 
offs  in  corporate  data  manage¬ 
ment  practices,  but  companies 
should  be  held  accountable  for 
their  stated  privacy  policies. 

“Information-sharing  poses 


Seals  Can  Help  Tell  E-Mail  From  Spam 


The  privacy  seals  found  on  many 
Web  pages  are  being  added  to 
e-mail  to  distinguish  legitimate 
mailings  from  the  flood  of  spam. 

A  goal  of  the  technology  devel¬ 
oped  by  Truste,  a  San  Jose-based 
nonprofit  privacy  seal  group,  and 
ePrivacy  6roup  Inc.,  a  Malvern, 
Pa.-based  consulting  and  technol¬ 
ogy  firm,  is  to  boost  consumer 
confidence  in  business  e-mail, 
which  they  say  is  being  eroded  by 
ever-growing  volumes  of  spam. 

The  Trusted  Sender  program  is 
being  beta-tested  by  The  Micro¬ 
soft  Network  (MSN)  and  other 
firms,  which  want  to  see  if  the  seal 
program  improves  e-mail  re¬ 
sponse  rates  and  encourages 
people  to  remain  on  mailing  lists. 

“It  could,  over  time,  help  people 
sort  out  in  their  in-box  who  really 
is  a  trusted  sender  and  who  isn’t," 
said  Diane  McDade,  privacy  prod¬ 
uct  manager  at  MSN. 

As  with  the  Web  seal  program, 
companies  that  participate  in 
Trusted  Sender  must  agree  to 
practices  such  as  sending  e-mail 
only  to  people  who  have  given 
their  permission.  The  program 
also  requires  installation  of  a  pro¬ 


prietary  server  technology,  either 
a  single  appliance  or  cluster,  de¬ 
pending  on  business  needs,  that 
adds  the  seal  to  outgoing  mail. 

An  e-mail  recipient  sees  the 
stamp  on  the  upper  right-hand 
corner  of  an  e-mail.  By  clicking  on 
a  verification  link,  the  user  can 
check  the  authenticity  of  the 
e-mail.  However,  users  have  to 
either  open  the  e-mail  to  see  the 
stamp  or  use  their  e-mail  client’s 
preview  feature;  otherwise,  the 
only  indication  of  the  stamp  is  a 
(P)  in  the  subject  line. 

Truste  and  ePrivacy  Group  are 
talking  with  Microsoft,  Yahoo  Inc. 
and  other  e-mail  providers  and 
clients  to  develop  a  means  for 
getting  the  seal  to  be  evident 
without  opening  the  letter. 

The  absence  of  easy  in-box 
recognition  is  a  problem,  said 
Jonathan  Gaw,  an  analyst  at  IDC 
in  Framingham,  Mass.  “I  don’t 
think  it’s  a  complete  solution,”  he 
said,  but  if  there  is  easy  in-box 
recognition,  businesses  “might 
value  something  that  helps  their 
commercial  e-mail  stand  out  from 
spam." 

-  Patrick  Thibodeau 


some  risk,  but  it  also  offers 
enormous  benefits,”  such  as 
consolidated  statements,  in¬ 
stant  credit  approval  and  lower 
business  costs  for  transaction 
processing,  said  Beales.  “Such 
benefits  should  not  be  sacri¬ 
ficed  needlessly.” 

The  FTC  will  step  in  when 
needed  but  not  necessarily  in 
every  instance,  he  said.  In  de¬ 
ciding  what  course  of  action  to 
take,  Beales  said,  the  FTC  will 
ask  a  company  two  questions: 
Did  you  have  a  system  in  place 
that  was  appropriate  to  the 
sensitivity  of  the  information, 
and  did  you  follow  your  pro¬ 
cedures? 

Along  with  regulatory  ac¬ 
tion,  companies  may  face  pri¬ 
vate  lawsuits.  There  have  been 
few  lawsuits  so  far  because  it’s 


Politics  of  Privacy 

Legislation:  Privacy  bills  are 
still  pending  in  Congress,  but  there 
are  doubts  about  whether  lawmak¬ 
ers  are  ready  to  take  action.  One  in¬ 
centive;  Businesses  want  federal 
preemption  of  state  privacy  laws. 

Federal  approach:  Bush  is 

aggressive  on  privacy  law  enforce¬ 
ment  but  has  shown  little  interest 
so  far  in  privacy  legislation. 

Lawsuits:  A  threat,  but  showing 
damages  is  difficult. 


difficult  to  show  damages  from 
privacy  violations,  said  Larry 
Ponemon,  CEO  of  Privacy 
Council  Inc.  in  Richardson, 
Texas.  “But  I  think  it’s  coming,” 
he  said. 


Although  there  are  several 
federal  privacy  bills  pending, 
there’s  skepticism  among  ob¬ 
servers  about  whether  either 
Congress  or  the  White  House 
is  ready  to  deal  with  this  issue. 

Chris  Israel,  a  U.S.  Depart¬ 
ment  of  Commerce  official, 
said  the  administration  is 
monitoring  legislation  in  Con¬ 
gress  and  continues  to  “re¬ 
main  engaged  with  industry,” 
but  it  hasn’t  taken  any  stand  on 
pending  bills. 

Not  everyone  at  the  FTC 
agrees  with  this  approach. 
Mozelle  Thompson,  a  com¬ 
missioner  at  the  FTC,  said  at 
the  conference  that  while  he 
supports  enforcement,  he  still 
believes  that  there’s  a  benefit 
to  having  some  kind  of  legisla¬ 
tive  privacy  baseline.  I 
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Data  Center 

ment  in  its  own  data  centers, 
said  Richard  Bogues,  director 
of  the  corporate  data  center  at 
Philips  Electronics  North 
America  Corp.  in  South  Plain- 
field,  N.J.  “It  gives  us  much 
more  flexibility  and  control,” 
he  said.  The  cost  of  operating 
such  centers  will  be  offset  by 
the  savings  on  equipment  host¬ 
ing  charges,  Bogues  added.  He 
declined  to  specify  that  cost. 

A  growing  number  of  com¬ 
panies  are  looking  for  service 
providers  to  help  them  manage 
systems  on  their  premises,  ac¬ 
cording  to  Laurie  McCabe,  an 
analyst  at  Summit  Strategies 
Inc.  in  Boston.  In  some  cases, 
firms  hope  to  better  leverage 
their  data  center  investments 
through  such  arrangements, 
McCabe  said.  Others  want 
greater  control  over  their  IT 
assets  when  they  do  outsource. 

Plans  to  move  Philips’  Inter¬ 
net  data  center  back  in-house 
started  in  July  as  concern  grew 
about  the  financial  viability  of 
Exodus,  Bogues  said.  Santa 
Clara,  Calif.-based  Exodus 
hosted  more  than  350  Web 


sites  for  Philips  at  a  facility  in 
Weehawken,  N.J. 

“We  decided  that  our  prima¬ 
ry  data  center  should  be 
owned  and  managed  by  Philips 
and  not  have  this  dependency 
on  a  third  party,”  Bogues  said. 

Originally,  the  plan  was  to 
find  a  suitable  building  within 
a  100-mile  radius  of  the  Exodus 
facility  and  migrate  everything 
over  by  the  end  of  March. 

But  the  schedule  was  quickly 
advanced  when  Exodus  filed 
for  Chapter  11  bankruptcy  pro¬ 
tection  on  Sept.  26,  a  move  that 
was  followed  by  a  deal  to  sell 
its  assets  to  London-based  Ca¬ 
ble  &  Wireless  PLC.  “We  de¬ 
cided  we  wanted  to  be  out  of 
there  by  Dec.  31,”  Bogues  said. 

The  task  was  complicated  by 
the  Sept.  11  attacks  and  the  de¬ 
mand  for  office  space  and 
telecommunications  services 
from  companies  that  had  been 
in  the  World  Trade  Center- 

Philips  finally  decided  to 
move  into  one  of  its  own  facili¬ 
ties  in  New  Jersey  —  a  build¬ 
ing  that  originally  had  been  a 
data  center  but  had  been 
switched  to  office  use.  The  fa¬ 
cility  was  quickly  converted 
back  into  a  full-fledged  data 
center  with  T1  and  OC3  lines 
for  Internet  connectivity  and 


Changeover 

Challenges 

The  problems  Philips  faced  in 
relocating  its  data  center  in¬ 
cluded  the  following: 

The  time  period  for  the  move 
was  drastically  shortened  when 
the  hosting  vendor  filed  for  bank¬ 
ruptcy  protection. 

Suitable  data  center  space 

was  scarce  after  Sept.  11  because 
of  high  demand  from  displaced 
World  Trade  Center  companies. 

Services  such  as  0C3  and  T1 

lines  became  difficult  to  obtain  for 
the  latter  reason. 

More  than  250  servers  had  to 
be  moved  to  the  new  facility  with 
minimal  disruption  to  services. 


backup  power  capabilities. 

Philips’  main  hardware  ven¬ 
dors,  Dell  Computer  Corp.  and 
Sun  Microsystems  Inc.,  helped 
move  systems  from  the  Exodus 
facility  to  its  new  data  center. 

In  the  near  term.  Philips  will 
set  up  similar  data  centers  in 
Europe  and  Asia,  and  link  all 
three  in  a  high-availability  con¬ 
figuration.  I 
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FRANK  HAYES/FRANKLY  SPEAKING 

Hit  the  Road,  Sam! 

CONGRATULATIONS,  SAM  PALMISANO.  Sure,  you’ve 
been  Lou  Gerstner’s  heir  apparent  for  the  past  year  or 
so,  ever  since  you  became  IBM’s  president  (see  page 
21).  But  “heir  apparent”  doesn’t  mean  a  whole  lot  in  this 
business  —  not  until  you  nail  down  the  top  job.  Now 
you  have.  Starting  in  March,  you’re  in  charge  at  IBM.  You  get  to  run 
the  show.  You’ll  be  the  big  man  in  Armonk. 

Now  get  ready  to  kiss  Armonk  goodbye. 


Nine  years  ago,  IBM  was  in  trouble  —  deep 
trouble.  IBM  was  a  company  whose  business 
model  depended  on  it  being  at  the  top  of  the  IT 
industry.  But  IBM  wasn’t  on  top  nine  years  ago. 
IBM  was  losing  money  by  the  billions. 

The  hot-air  sector  of  the  IT  industry  said 
IBM  couldn’t  survive  without  breaking  itself  up. 
The  pundits  and  columnists  and  blowhards 
agreed  that  IBM  needed  a  technologist  as  boss, 
and  they  insisted  that  IBM  would  have  to  scale 
itself  back  to  some  core  competency  to  stay 
afloat,  in  whatever  diminished  form. 

Yeah,  right.  Instead  of  a  techie,  we  got  cookie 
man  Lou  Gerstner.  And  instead  of  breaking  IBM 
up,  the  man  from  Nabisco  built  it  back  up  to  be¬ 
ing  a  broad-based  industry  leader. 

Gerstner  did  that  by  grinding  IBM’s  sacred 
cows  into  hamburger.  At  the  old  IBM,  hardware 
was  king  and  the  mainframe  was  God.  Some 
IBM  products  were  intentionally  crippled  so 
they  wouldn’t  take  sales  away  from  other  IBM 
products.  And  for  IBM  salespeople  to  sell  non- 
IBM  products  was  heresy. 

Lou  Gerstner  dumped  all  that.  Today  at  IBM, 
services  are  the  big  moneymaker.  Nothing  gets 
crippled,  at  least  not  on  purpose.  And  nothing  is 
out  of  the  question  —  including  selling  com¬ 
petitors’  products,  if  that’s  what  it  takes  to  close 
the  deal. 

Gerstner  did  find  a  core  compe¬ 
tency  for  IBM,  though:  He  changed 
IBM  from  a  computer  company  to  a 
computing  company. 

So  whatever  customers  needed, 
that  was  what  IBM  delivered.  When 
that  meant  delivering  services,  IBM 
delivered  services.  When  it  meant 
trucking  in  somebody  else’s  PCs  or 
servers,  that’s  what  was  on  the 
truck.  When  it  called  for  once-un- 
thinkable  products  like  Linux  main¬ 
frames,  that’s  what  IBM  produced. 

Instead  of  moving  hardware  out 


of  IBM  warehouses  and  into  customers’  data 
centers,  Gerstner  concentrated  on  moving  mon¬ 
ey  out  of  customers’  wallets  and  into  IBM’s 
pocket.  And  IBM  was  successful  again. 

Now,  Sam  Palmisano,  it’s  your  turn  to  get  the 
hot-air  treatment.  Some  of  the  same  people  who 
said  nine  years  ago  that  IBM  needed  a  technolo¬ 
gist  to  break  it  up  are  saying  now  that  as  a  29- 
year  IBM  insider,  you’re  the  wrong  guy  for  the 
job  of  keeping  it  together.  That  you  don’t  have 
the  vision  to  see  where  Big  Blue  should  go  or 
how  to  get  it  there.  That  your  best  bet  is  to  fo¬ 
cus  on  improving  IBM’s  hardware  revenue. 

Baloney.  That’s  advice  for  the  old  Big  Blue, 
the  computer  company.  Customers  hated  that 
old  IBM.  They  hated  being  locked  into  the  hard¬ 
ware  and  software  and  architectures  IBM 
shoved  down  their  throats.  They  wanted  to 
wriggle  out  from  IBM’s  grip,  and  they  ended  up 
buying  just  about  anything  but  IBM  to  escape. 

But  today,  they’re  not  trying  to  wriggle  out. 
They’re  lined  up  to  buy  IT  services  from  the 
new  Big  Blue  —  IBM  the  computing  company. 

Those  same  customers  will  also  buy  more 
IBM  hardware  and  software  —  i/IBM  has  what 
they  need.  And  customers  will  tell  you  what 
they  need,  what  problems  they  have  to  solve, 
what  really  matters  to  them.  After  all,  IBM  is 

the  company  they’re  hiring  to  make 
it  all  work. 

All  you  have  to  do  is  offer  what 
they  need.  But  first,  you  have  to  find 
out  what  that  is. 

You’ve  clocked  a  lot  of  face  time 
with  customers  over  the  past  28 
years.  Now  it’s  time  to  clock  a  lot 
more  face  time.  Not  to  sell  IBM 
products.  Not  even  to  sell  IBM.  But 
to  listen. 

And  you  can’t  do  that  in  Armonk. 
So  congratulations,  Sam  Palmi¬ 
sano.  Now  pack  your  bags  and  get 
out  of  town.  I 


frank  hayes.  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworld.com. 


COMPANY’S  NEW  president, 
who  has  a  heavy  technical  back¬ 
ground,  calls  in  IT  director  pilot 
fish  and  snarls,  “Our  @#$°/o!  net¬ 
work  is  absolute  junk!”  What’s 
wrong?  asks  shocked  fish.  Turns 
out  the  boss  doesn't  have  the 
Web  access  he  requested  weeks 
before.  As  he  tries  to  log  in  to 
prove  his  point,  fish  asks,  “Why 
are  you  spelling  your  name 
wrong  at  the  log-in?" 

PILOT  FISH  shows  up  for  a 
meeting  on  improving  communi¬ 
cations,  only  to  find  the  room 
empty.  “Oh,  the  meeting  has 
been  canceled  because  it’s  not 
needed,”  says  departmental  sec¬ 
retary.  “This  should  have  been 
communicated  to  you.” 

AFTER  TWO  WEEKS  of  trou¬ 
bleshooting  network  problems 
at  a  construction  site,  pilot  fish’s 
co-worker  walks  in  with  his  arms 
full  of  Ethernet  cable  -  obviously 
stretched,  with  the  insulation 
pulled  apart  in  several  places. 
“While  the  boss  was  out,  a  sum¬ 
mer-help  guy  decided  to  pull  it 
through  the  conduit  as  a  favor," 
fish  says.  "When  it  was  too  hard 


to  pull,  he  attached  it  to  a  tractor 
and  pulled  it  through  500  feet  of 

conduit.” 

HELP  DESK  pilot  fish  is  looking 
for  what’s  taking  up  all  the  space 
on  a  user’s  Outlook  account. 
“Check  the  properties  of  your 
folders  and  tell  me  which  one 
takes  up  the  most  space,”  fish 
instructs  user.  “How  can  I  tell?" 
user  asks.  “Look  for  the  folder 
with  the  largest  number,"  fish 
says.  User  persists:  “How  do  I 
tell  what  the  largest  number  is?” 

SOME  PEOPLE  can  recognize 
when  something  comes  broken 
right  out  of  the  box,  sighs  pilot 
fish  who  manages  IT  for  lots  of 
rural  offices.  One  user  notices 
her  new  mouse  rattles  when  she 
shakes  it.  So  she  squirts  some 
Crazy  Glue  into  the  hole  on  the 
bottom  and  fixes  the  rattle,  once 
and  for  all. 

Rattle  my,  er.  mouse:  sharky® 
computerworld.com.  You 
score  a  sharp  Shark  shirt  if  your 
true  tale  of  IT  life  sees  print  -  or 
if  it  shows  up  in  the  daily  feed  at 
computerworld.com/sharky. 
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The  Internet  has  the  potential  to  positively  change  people's  lives  in  ways  unimagined  before.  Cisco  is  actively  involved 
in  programs  to  ensure  that  the  Internet  brings  opportunity  to  every  corner  of  the  Earth.  That  is  why  we've  created 
the  Cisco  Networking  Academy  Program.  This  educational  program  enrolls  more  than  160,000  students  of  all  ages 
in  133  countries,  providing  them  with  the  networking  skills  needed  to  participate  in  today's  Internet  economy.  We 
invite  you  to  become  more  involved*  Discover  all  that's  possible  on  the  Internet,  visit  cisco.com/edu/academies 
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THE  CODERNAUTS  WERE  ON  A  SEARCH  FOR  A  DATABASE  THAT  RUNS  ON  LINUX)  UNIX' AND  WINDOWS'  2000.  THEY  DISCOVERED: 

DB2  OUTPERFORMS  ORACLE 

I  CUSTOMERS  KNOW  IT,  PARTNERS  KNOW  IT,  BENCHMARKS  PROVE  IT  | 
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ibm.com/db2/outperform 


IT’S  A  DIFFERENT  KIND  OF  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  OF  SOFTWARE. 


